Network Architect (Security)Location: Richmond, VA onsiteDuration: 3-6 months (Contract to hire)Top skills:Architect level- 15+ years of experience in enterprise networkingDeep expertise in BGP routing and network designStrong hands-on experience with:Palo Alto Networks firewallsCisco SD-WAN (Viptela)Cisco Meraki full stackKey Responsibilities:Architecture & Design: Lead design and implementation of enterprise and cloud networking architectures (Azure, AWS, hybrid). Develop and execute network consolidation strategies across multiple environments and business units. Architect secure, scalable connectivity patterns including site-to-site and client VPNs, SD-WAN deployments, cloud transit hubs and hub/spoke models. Define standards for routing, segmentation, and high availability. Cloud Networking: Design and manage networking in Azure and familiarity with AWS, and GCP.
Implement and maintain virtual networks (VNets/VPCs), peering and private connectivity (ExpressRoute, Direct Connect), network security controls (NSGs, firewalls, routing tables). Integrate on-prem and cloud environments.Routing & Core Networking: Design and troubleshoot complex routing environments using BGP, OSPF/EIGRP. Optimize routing policies for performance, failover, and traffic engineering. Lead troubleshooting of latency, packet loss, and asymmetric routing issues.Security & Firewalls: Manage next-gen firewall solutions, primarily Palo Alto Networks firewalls (PAN-OS, Panorama). Define and enforce security policies, NAT, and segmentation strategies.
Partner with security teams on threat mitigation and compliance requirements. SD-WAN & Branch Networking: Design and support SD-WAN solutions using Cisco Viptela / Cisco SD-WAN. Manage and optimize branch networking using Cisco Meraki (full stack: MX, MS, MR). Ensure consistent policy, performance, and visibility across all sites.Carrier & Vendor Management: Act as primary technical liaison with telecom carriers and ISPs. Lead troubleshooting of circuit issues (latency, outages, routing anomalies).
Validate and design circuit turn-ups (DIA, MPLS, broadband, LTE/5G). Coordinate with vendors during deployments, escalations, and outages.Operations & Leadership: Serve as Tier 3 escalation point for network-related incidents. Mentor junior engineers and provide technical guidance. Develop and maintain documentation, standards, and runbooks. Participate in on-call rotation as needed.Required Qualifications:Years of experience – Architect level 15+Deep expertise in BGP routing and network designStrong hands-on experience with: Palo Alto Networks firewalls, Cisco SD-WAN (Viptela), Cisco Meraki full stackProven experience designing and implementing cloud networking architecturesStrong troubleshooting skills across routing, firewall, and connectivity domainsExperience working directly with telecom carriers and ISPsPreferred Qualifications:Experience with: Multi-tenant or multi-environment network consolidationCertifications (preferred but not required): CCNP/CCIE, PCNSE (Palo Alto), Azure Network Engineer Associate (AZ-700), AWS Advanced Networking Specialty