Network Architect - LAN

This role involves designing, implementing, and managing enterprise LAN architectures across access, distribution, core, and fabric layers on Cisco and Juniper platforms. The successful candidate will lead complex network projects, including deployment of advanced technologies such as EVPN-VXLAN, campus fabric, and Cisco ISE. They will collaborate with cross-functional teams to ensure secure, reliable, and scalable network solutions that align with organizational standards and strategic goals., * Design, document, and govern LAN architectures across multiple network layers on Cisco and Juniper platforms, including Ethernet VPN (EVPN-VXLAN) and campus fabric.

• Architect and refine Cisco ISE deployments, encompassing policies for 802.1X, MAB, guest access, BYOD, profiling, posture, and Cisco TrustSec features.
• Define reference designs, configuration standards, and templates; lead design reviews for new sites, technology upgrades, and migrations.
• Lead troubleshooting and root-cause analysis for Layer 2, Layer 3, and authentication issues, implementing permanent solutions.
• Plan and support network cutovers, change windows, lifecycle upgrades, rollback procedures, and post-change validation activities.
• Partner with security, wireless, WAN, and automation teams to develop integrated network solutions with segmentation, visibility, and automation in mind.
• Contribute to automation initiatives leveraging scripting tools such as Python and Ansible for configuration management and testing.
• Collaborate with architects, engineers, project managers, and stakeholders; document work clearly and share knowledge across teams.
• Support network security through effective segmentation, policy enforcement, and compliance practices.
• Stay current with industry best practices and emerging technologies, recommending improvements to LAN designs and implementations.

• 10 or more years of enterprise network engineering or architecture experience with a focus on LAN environments.
• Expert-level knowledge of Cisco Catalyst and Nexus switches, Juniper EX and QFX switches, including STP, VLANs, LACP, OSPF, BGP, multicast, QoS, and high availability configurations.
• Hands-on experience designing and managing Cisco ISE environments with integrations such as AD, LDAP, and MDM, including distributed deployments and policy sets.
• Strong understanding of network segmentation, zero-trust security principles, and secure access architectures.
• Proven ability to produce detailed design documents, diagrams, and operational runbooks.
• Relevant education, training, certifications, or equivalent practical experience in networking.
• Scripting and automation skills using Python, Ansible, and REST APIs.
• Ability to work in a collaborative team environment, communicate clearly, and manage multiple projects effectively.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.