LAN Network Architect

• 8+ years of enterprise network engineering experience, including 3+ years in an architect or senior design role \n

• Deep hands-on expertise with Cisco campus switching (Catalyst 9000 series, IOS-XE) and Juniper switching (EX/QFX, Junos) \n

• Strong experience designing and operating Cisco ISE in a large, multi-site enterprise (802.1X, MAB, profiling, posture, guest, pxGrid) \n

• Solid understanding of Layer 2/Layer 3 protocols including VLANs, STP, OSPF, BGP, VRFs, and multicast \n

• Experience with network segmentation strategies such as TrustSec/SGTs or VRF-based designs \n

• Proven ability to produce architecture documents, design standards, and implementation plans \n

• Strong communication skills and comfort working with technical teams and business stakeholders alike \n, * CCIE (Enterprise Infrastructure or Security), CCNP, or JNCIP/JNCIE certifications \n

• Experience with Cisco DNA Center/Catalyst Center or Juniper Mist automation and assurance \n

• Experience in a pharmaceutical, life sciences, or other regulated (GxP) environment \n

• Familiarity with network automation tools such as Ansible or Python \n

• Experience with Cisco Wireless and integrating wireless access with ISE policy \n

n \n

• Partner with the primary LAN/ISE architect to own the design, standards, and roadmap for the enterprise campus LAN and network access control environment, providing full coverage and continuity across both domains. \n

• Design and document scalable, highly available campus network architectures using Cisco Catalyst and Juniper EX/QFX switching platforms. \n

• Architect, deploy, and maintain Cisco ISE policy for 802.1X, MAB, guest, posture, profiling, and TrustSec/segmentation use cases. \n

• Develop high- and low-level designs, configuration standards, and implementation plans for new builds, refreshes, and site expansions. \n

• Serve as a senior escalation point for complex LAN and ISE issues, leading root cause analysis and driving long-term fixes. \n

• Work with security, wireless, and operations teams to align network access policy with enterprise security and compliance requirements. \n

• Evaluate lifecycle status of hardware and software, and recommend upgrade and refresh plans that keep the environment current and supported. \n

• Mentor engineers and produce clear documentation, runbooks, and knowledge transfer materials for operations teams. \n

\n

\n

We are seeking an experienced LAN Architect with deep expertise in Cisco and Juniper campus networking and Cisco Identity Services Engine (ISE) to join the global network engineering team of a leading pharmaceutical company. In this role, you will serve as the secondary architect for the LAN and ISE domains, partnering closely with the primary architect to design, secure, and evolve a large enterprise campus environment that supports research, manufacturing, and business operations.