> Markdown version of [/jobs/ext/4311195-senior-network-architect](https://www.wearedevelopers.com/jobs/ext/4311195-senior-network-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Architect - **Company:** Managed Solution LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $165,000.0 - $195,000.0 - **Contract:** Permanent contract - **Skills:** LTE (Telecommunication), Wireless LAN, Application Programming Interfaces (APIs), Microsoft Azure, Border Gateway Protocol, Spanning Tree Protocols, Cisco PIX, Cloud Computing, Complex Networks, Information Systems, Information Technology Consulting, Data Centers, Trunking, Failover, Data-Flow Analysis, Monitoring of Systems, Networking Hardware, Internet Protocol Security (IP SEC), Subnetting, Virtual Private Networks (VPN), Multi-protocol Systems, Internet Service Provider, Python (Programming Language), Knowledge Management, Local Area Networks, Network Security, Network Troubleshooting, Microsoft Security Essentials, Microsoft Visio, Network Diagrams, Routing, Network Segmentation, Packet Analyzer, Network Administration, Cisco Nexus Switches, Open Shortest Path First (OSPF), Public Key Infrastructure, Remote Access Technology, Azure Active Directory, Ansible, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Software Deployment, Virtual Local Area Networks, Wide Area Networks, Wi-Fi Technology, Scripting, Transport Layer Security, Identity Services Engine, Network Access Control, Load Balancing, Okta, Software Troubleshooting, Firewalls (Computer Science), Data Center Networking, Documentation System, Information Technology, Network Support, Palo Alto Networks, Fortinet, Open Network Automation Platform, Oracle Cloud Infrastructure, Cisco Switches, Cisco, SSL VPN - **Published:** October 22, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=81726e4ae5f8ef08 ## About the Role * A bachelor's degree in computer science, information systems, engineering, or a related field, plus 8+ years of enterprise network engineering experience, including at least 3 years in an architect, senior consultant, or presales-facing role. Equivalent combinations of education and experience will be considered. * Experience at a managed service provider (MSP/MSSP) or IT consulting firm supporting multiple client environments strongly preferred. * Demonstrated experience running multi-site network migrations (20+ sites) from design through cutover. * Proven track record of mentoring engineers and producing high-quality technical documentation. * Exceptional written and verbal communication skills, including the ability to explain complex network designs to non-technical executives and to present with authority in presales meetings. * Documentation-first mindset, with a commitment to leaving every environment better documented than it was found. * A patient, generous teacher who enjoys growing other engineers. * Calm, methodical, and accountable under pressure during outages, and comfortable working autonomously across several client environments at once. * Strong organizational skills, with the ability to balance project delivery, escalations, and presales work and to communicate status proactively., * Firewalls and SD-WAN: Fortinet FortiGate (FortiOS) including Secure SD-WAN, IPsec hub-and-spoke and ADVPN, FortiManager, FortiAnalyzer and FortiClient EMS. * Palo Alto Networks NGFW, Panorama (templates and device groups), GlobalProtect and PAN-OS SD-WAN, with enough depth to stabilize, document and migrate an existing estate. * Routing and switching: BGP (including SD-WAN overlays), OSPF, static and policy routing, VLANs/trunking, spanning tree, HA/failover design, dual-ISP and LTE backup. * Cisco Catalyst and Nexus switching, Cisco ASA, and Cisco Meraki (MX, MS, MR) managed through the Meraki Dashboard. * VPN and remote access: site-to-site IPsec, SSL/IPsec remote access, SAML/MFA integration (Entra ID, Okta, Duo), certificate/PKI management. * WAN and carrier services: Metro Ethernet/E-LAN, MPLS, DIA, circuit diversity; working with carriers to resolve circuit and performance issues. * Wireless: enterprise Wi-Fi design and troubleshooting (Meraki MR, Cisco 9800 WLC; FortiAP a plus). * Strong troubleshooting with packet captures, flow analysis and monitoring tools (LogicMonitor or similar). Preferred/Strongly Desired * SASE/cloud-delivered networking: FortiSASE, Cisco Umbrella/Secure Access, and Microsoft Security Service Edge. * Application delivery: Kemp LoadMaster and/or F5 (VIPs, SSL certificates, migrations between platforms). * Cloud networking: Oracle Cloud Infrastructure (OCI) and Microsoft Azure (VNets, VPN gateways, FortiGate-VM / virtual NGFWs). * Data center networking (Cisco Nexus 5K/9K) and data center vacate/consolidation projects. * OT/industrial network segmentation (IEC 62443 zones and conduits, industrial DMZ) for manufacturing environments. * Healthcare (HIPAA) and life-sciences/regulated environment experience. * Familiarity with Network Access Control (FortiNAC, Cisco ISE) and network automation/scripting (Python, Ansible, FortiManager/Meraki APIs). * Experience with ConnectWise, LogicMonitor and Passportal (or similar PSA/RMM/documentation tools). Certifications: * Fortinet NSE 4 (FortiGate) required within 6 months of hire; NSE 6/7 Secure Networking (SD-WAN or Architect) preferred. Equivalent legacy Fortinet FCP/FCSS certifications accepted. * Cisco CCNP Enterprise (or higher) preferred; CCIE a plus. * Palo Alto Networks PCNSE preferred. * Microsoft Azure AZ-700 (Network Engineer) or OCI networking certification a plus. * Attaining and maintaining relevant technical certifications may be required for continued employment. Other Requirements: This individual will be subject to a pre-hire background screening and reference check process. As someone who may be involved in delivering Professional Services project work, individuals in this role may be subject to additional background screening as required by client contracts. Such screenings may include drug tests. Shift + Availability: Your normal workweek will be Monday through Friday, with hours to be agreed upon based on Company needs. Managed Solution operates in Pacific Time Zone, though some scheduling flexibility may be offered for employees in other regions. Managed Solution operates a 24x7x365 business, and, in this position, you will be required to perform work outside of normal business hours (including weekends and nights) as needed to support our clients and teams. This role requires availability for after-hours maintenance windows and on-call escalation in support of Managed Solution's 24x7 operations. Work Location/Hybrid Status: This position will default to remote work, within a state where Managed Solution has payroll operations, though onsite presence for client-site work will likely be required (travel up to 25%). Your presence at our company headquarters in San Diego, CA; at meetings/conferences/off-site events; at client locations; or elsewhere, may be required on occasion. Physical Requirements: Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA and other federal, state and local standards, including meeting qualitative and/or quantitative productivity standards. Ability to maintain regular, punctual attendance consistent with the ADA, FMLA and other federal, state and local standards. The essential functions of this job require: the ability to frequently sit and stand for long periods of time; to manipulate objects with fine and gross motor skills; to lift and carry network equipment up to 50 lbs. and work in data center and network closet environments; to communicate in written and spoken English; to hear; to utilize close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus. Managed Solution is an equal opportunity employer and will consider qualified applicants who can perform the essential functions of the job, with or without reasonable accommodation. ## Description As one of the senior-most networking voices across Managed Solution's largest managed network clients, including multi-site manufacturers, life-sciences and healthcare organizations with dozens of locations, cloud hubs, and regulated environments, the Senior Network Architect works across the full solution lifecycle. This is a hybrid role by design: the Senior Network Architect helps sell the right solution, designs it, builds it, and fixes it when it breaks, partnering with Sales and Presales to scope and architect network and security solutions, then implementing, remediating, and resolving escalated break/fix issues. Equally important, this role raises the capability of the whole team by mentoring and training existing network engineers across the One Technical Team (managed and professional services teams), to include building documentation (diagrams, runbooks, inventories, and procedures) that gives every engineer what they need to succeed in a client's environment. The ideal candidate is equally comfortable whiteboarding a target-state SD-WAN design with a client's IT director, troubleshooting a down IPsec tunnel at 7 a.m., and walking a junior engineer through why it happened. The Senior Network Architect will be responsible for the following: What you'll do: Architecture + Presales * Partners with Sales, Presales, and Account Management to run technical discovery, assess current-state networks, and design fit-for-purpose solutions (SD-WAN, firewalls, LAN/WLAN, remote access/ZTNA, data center, and cloud networking). * Produces architecture designs, target-state topologies, multi-phase roadmaps, and network maturity assessments for client leadership. * Scopes work into Statements of Work and Rough Order of Magnitude (ROM) estimates, including tiered per-site estimating, assumptions, risks, and hours breakdowns. * Presents recommendations and trade-offs (for example, vendor platform migrations, hub placement, and circuit diversity) to technical and executive audiences. * Evaluates vendor platforms and lifecycle status (end-of-life/end-of-support hardware and software) and recommends refresh paths. Implementation + Migration * Leads and executes network projects, including firewall and SD-WAN migrations (including Palo Alto to Fortinet), site rollouts built from standard templates, data center moves and vacates, subnet and routing migrations, load balancer migrations, and wireless/LAN refreshes. * Builds and maintains centrally managed configurations using FortiManager/FortiAnalyzer, Panorama, and the Meraki Dashboard, driving consistent policy packages and site templates. * Plans maintenance windows, change controls, and cutover and rollback plans, and coordinates with carriers, ISPs, SASE providers, and client application teams during changes. * Implements remote access and Zero Trust solutions (FortiClient/EMS, IPsec and SSL VPN with SAML/MFA, and ZTNA) integrated with Microsoft Entra ID and Duo. Remediation, Break/Fix + Escalation * Serves as the senior-most escalation point for complex network incidents across managed clients, including WAN and tunnel outages, failover failures, routing issues, performance and throughput problems, wireless issues, and VPN/certificate problems - including requirement to perform occasional work outside of normal business hours as needed to successfully manage critical network incidents and ensure the success of scheduled outages, maintenances, and cutovers * Performs root-cause analysis, writes clear RCAs with corrective actions, and drives stabilization plans for unstable environments. * Troubleshoots application-impacting network issues (for example, clinical imaging/PACS traffic and RDS and ERP access over WAN) alongside client and vendor teams. * Works vendor and carrier support cases through to resolution (Fortinet, Palo Alto, Cisco/Meraki, Aryaka, and ISPs/circuit providers). * Participates in an after-hours escalation and maintenance-window rotation in support of Managed Solution's 24x7 managed services. Documentation + Knowledge Management * Owns the "map" for key client environments, including network diagrams (Visio), site topologies, IP/VLAN/subnet records, master device lists, tunnel and peer inventories, circuit records, and routing documentation. * Creates and maintains client network runbooks, standard operating procedures, configuration standards, naming conventions, and change procedures so that any engineer can support the environment. * Keeps documentation current as sites are built, migrated, or changed, and reconciles naming and inventory across management, monitoring (LogicMonitor), and ticketing (ConnectWise) systems. * Produces client-facing deliverables, including architecture design documents, as-built documentation, end-user guides, and handover packages. Technical Leadership, Mentoring, Training + Team Enablement * Acts as technical lead for Networking-focused resources across the One Technical Team, including Senior Network Security Engineers, Project/Network Engineers, and Network Support Specialist, L2 positions. * Mentors and coaches existing network engineers (L1-L3), raising their troubleshooting, design, and documentation skills through shadowing, paired work, and structured reviews. * Delivers internal training sessions and lab walkthroughs on core technologies (FortiGate/SD-WAN, BGP/OSPF, IPsec, Meraki, and wireless) and on client environments. * Defines and publishes team standards, including reference designs, build templates, peer review of changes, and escalation playbooks. * Supports certification plans for team members and helps shape the networking skills roadmap for Professional and Managed Services. Performance + Compliance * Complies with all company and departmental policies and procedures and maintains strict client confidentiality. * Consistently models the One Technical Team Pillars of Excellence: Accountability, Utilization, and Engagement. * Performs other, related projects and duties as assigned.