Network Architect

The Network Operations Architect is responsible for the architecture, operational design, continuous improvement, and lifecycle strategy of the Bank’s enterprise network infrastructure. This role combines strategic architecture leadership with deep, hands-on network engineering expertise to ensure network services are resilient, secure, scalable, supportable, and aligned with business and regulatory requirements. The Architect evaluates existing and emerging technologies, establishes technical standards and roadmaps, guides complex implementations, and partners with Network Operations, the NOC, Security, Cloud, Infrastructure, and application teams to improve service reliability and operational effectiveness. The role serves as a senior technical advisor to IT and executive leadership, participates in architecture governance, and may lead critical network initiatives and major incident resolution efforts., * Own and evolve the enterprise network architecture for branch, campus, data center, cloud, WAN, SD-WAN, wireless, and internet.

• Assess current network technologies, operational processes, performance, stability, capacity, security, lifecycle status, and cost; identify and present opportunities for improvement.

• Develop target-state architectures, technology roadmaps, reference designs, standards, patterns, and decision documentation that translate business requirements into supportable network solutions.

• Design, test, validate, and guide deployment of complex network solutions and major enhancements, including resilient connectivity, segmentation, routing, switching, wireless, and hybrid-cloud integration.

• Provide architecture leadership for network operations, including observability, configuration management, incident response, root cause analysis, problem management, maintenance, cutovers, capacity planning, and service continuity.

• Provide escalated technical leadership for complex or high-impact network incidents; help determine resolution options, restoration strategies, corrective actions, and long-term prevention measures.

• Drive network automation and infrastructure-as-code practices using APIs, Ansible, PowerShell, Python, Terraform, templates, and orchestration tools to reduce manual effort and improve consistency.

• Establish operational requirements for monitoring, alerting, configuration backup, compliance auditing, change tracking, performance analytics, and service health reporting.

• Create and maintain architecture diagrams, network standards, engineering documentation, operational runbooks, support models, and implementation guidance.

• Lead technical reviews, proofs of concept, due diligence assessments, and architecture evaluations for technologies proposed for implementation.

• Prepare proposals, executive briefings, architectural recommendations, risk assessments, and technical decision materials for IT and Bank leadership.

• Partner with hardware, software, carrier, consulting, and managed-service providers; lead technical discussions and assist with solution evaluation, statements of work, and contract negotiations.

• Participate in the Bank’s architecture governance and review processes and ensure network designs align with enterprise, security, cloud, and data protection standards, principles.

• Mentor engineers and operations staff, provide technical direction on projects and strategic initiatives, and promote consistent engineering and troubleshooting practices.

• Ensure departmental documentation and activities comply with applicable laws, regulations, policies, standards, and procedures, including required compliance training.

• Perform other duties and responsibilities as assigned.

Core Technical Competencies

Enterprise and Branch Networking

• Large-scale distributed networks supporting branch, campus, data center, and WAN environments

• Advanced routing, switching, wireless, IP addressing, DNS, DHCP, resilient connectivity, and network segmentation

• Hands-on troubleshooting of complex availability, performance, connectivity, and security issues

Network Platforms and Security

• Cisco enterprise routing, switching, wireless, and network services

• Fortinet next-generation firewalls, VPN, segmentation, secure access, policy design, and troubleshooting

• VMware VeloCloud SD-WAN and Wireless architecture, deployment, optimization, and operational support

Cloud and Hybrid Networking

• Microsoft Azure networking, including VNets, subnets, route tables, NSGs, Azure Firewall, VPN Gateway, ExpressRoute, and on-premises integration

• Hybrid-cloud routing, connectivity, security architecture, and resilient design across cloud and physical data centers

Operations, Observability, and Automation

• Cisco Catalyst Center for assurance, templated provisioning, automation, and configuration enforcement

• SolarWinds and Network Configuration Manager for monitoring, configuration backup, compliance, change tracking, and remediation

• Terraform, APIs, Ansible, PowerShell, and Python for infrastructure-as-code, orchestration, and operational automation

• IT service management practices, incident and problem management, root cause analysis, change governance, operational readiness, and runbook development

Leadership and Business Skills

• Serve as a trusted technical advisor to senior leadership and clearly communicate architecture, operational risk, investment needs, and technology tradeoffs.

• Lead cross-functional technical teams and influence decisions without relying on direct authority.

• Read, analyze, and interpret technical, financial, contractual, regulatory, and legal documentation.

• Present effectively in technical working sessions, architecture reviews, vendor discussions, and executive briefings.

• Prioritize multiple initiatives, work independently with limited supervision, and make sound decisions in high-impact situations.

• Bachelor’s degree in information technology, computer science, engineering, or a related field preferred; equivalent relevant experience may be considered.

• Eight or more years of progressive experience in enterprise networking, network architecture, senior network engineering, network operations, solution architecture, or related technology leadership roles.

• Demonstrated experience designing and operating complex, highly available enterprise networks across distributed locations, data centers, and cloud environments.

• Experience working in a regulated financial institution or similarly regulated environment preferred.

• Experience leading major network implementations, technology evaluations, operational improvements, and complex incident resolution.

Certificates, Licenses, and Registrations

• Advanced networking, cloud, security, automation, or architecture certifications are preferred.

• Examples include CCNP Enterprise, CCIE Enterprise Infrastructure, Azure Solutions Architect Expert, Fortinet certifications, VMware VeloCloud certification, Terraform Associate, or comparable credentials.

• Ability and willingness to obtain role-relevant certifications within an established timeframe may be considered.

Computer and Documentation Skills

• Advanced proficiency with Microsoft 365 productivity tools, including Word, Excel, PowerPoint, SharePoint, and Teams.

• Proficiency with Microsoft Visio or comparable network and architecture diagramming tools.

• Ability to develop clear architecture diagrams, network maps, standards, roadmaps, proposals, technical documentation, and executive presentations.

Other Qualifications

• Strong understanding of network security principles, technical security controls, resilient design, performance tuning, and operational support models.

• Working knowledge of related server, cloud, identity, database, and application dependencies sufficient to design integrated solutions.

• Understanding of regulatory and compliance considerations applicable to financial services, including FFIEC, GLBA, data protection, and technology risk management.

• Strong written and verbal communication, organization, planning, analytical, and problem-solving skills.

• Some travel may be required to support architecture assessments, branch or facility deployments, major upgrades, and critical onsite troubleshooting.