Senior Network Architect

Description: As a Senior Network Architect, you will be responsible for the design, security, resilience, and long-term consistency of DataOne’s network infrastructure. You will ensure that the network meets the availability and performance requirements of critical applications and industrial systems. Your responsibilities will cover the entire network lifecycle, from target architecture and technology selection to implementation standards, operational monitoring, automation, and continuous infrastructure hardening. Your Responsibilities: Network Architecture & Design: - Define and maintain the target network architecture across LAN, WAN, data centers, and remote sites. - Design segmentation strategies using VLAN, VRF, and micro segmentation to isolate IT, industrial, physical security, and guest environments. - Design routing, switching, wireless, and interconnection solutions. - Define redundancy and failover architectures to ensure high availability. - Produce and maintain technical documentation, including network topologies, addressing plans, flow matrices, cabling, and rack layouts. - Evaluate network technologies and vendors. - Lead proofs of concept and technical evaluations. Network Security & Resilience: - Define and enforce firewall policies, filtering rules, and inter-zone traffic controls. - Design and maintain secure remote access and site-to-site connectivity using VPN, SD-WAN, and zero-trust access. - Implement network access control and authentication mechanisms, including 802.1X, RADIUS, and certificate-based access. - Contribute to business continuity and infrastructure resilience through redundant links, failover testing, and recovery procedures. - Participate in security reviews, audits, and compliance initiatives such as ISO 27001, SOC 2, or equivalent frameworks. Operations, Monitoring & Incident Management: - Establish and continuously improve network monitoring and alerting for availability, saturation, latency, packet loss, and hardware health. - Define alert thresholds and escalation procedures. - Lead the diagnosis and resolution of complex network incidents as the final technical escalation point. - Conduct post-incident reviews and establish corrective action plans. - Plan and supervise maintenance windows, firmware upgrades, and equipment replacements. Automation & Industrialization: - Standardize network device configurations across multiple sites. - Define and enforce reproducible configuration baselines. - Automate provisioning, configuration management, and compliance checks using Ansible or equivalent tools. - Maintain configuration backups, change traceability, and rollback capabilities. - Ensure consistency between technical documentation and the actual deployed network infrastructure. Coordination & Continuous Improvement: - Collaborate closely with development, infrastructure, physical security, and field teams. - Provide network expertise for projects involving new sites, data center changes, telephony, video surveillance, and industrial equipment. - Produce regular reporting on network availability, service quality, and infrastructure programs. - Maintain active technology watch across networking, network security, and automation. - Identify and recommend relevant technology and architecture improvements.

Network Architecture & Design: Define and maintain the target network architecture across LAN, WAN, data centers, and remote sites. Design segmentation strategies using VLAN, VRF, and micro segmentation to isolate IT, industrial, physical security, and guest environments. Design routing, switching, wireless, and interconnection solutions. Define redundancy and failover architectures to ensure high availability. Produce and maintain technical documentation, including network topologies, addressing plans, flow matrices, cabling, and rack layouts. Evaluate network technologies and vendors. Lead proofs of concept and technical evaluations.\n\nNetwork Security & Resilience: Define and enforce firewall policies, filtering rules, and inter-zone traffic controls. Design and maintain secure remote access and site-to-site connectivity using VPN, SD-WAN, and zero-trust access. Implement network access control and authentication mechanisms, including 802.1X, RADIUS, and certificate-based access. Contribute to business continuity and infrastructure resilience through redundant links, failover testing, and recovery procedures. Participate in security reviews, audits, and compliance initiatives such as ISO 27001, SOC 2, or equivalent frameworks.\n\nOperations, Monitoring & Incident Management: Establish and continuously improve network monitoring and alerting for availability, saturation, latency, packet loss, and hardware health. Define alert thresholds and escalation procedures. Lead the diagnosis and resolution of complex network incidents as the final technical escalation point. Conduct post-incident reviews and establish corrective action plans. Plan and supervise maintenance windows, firmware upgrades, and equipment replacements.\n\nAutomation & Industrialization: Standardize network device configurations across multiple sites. Define and enforce reproducible configuration baselines. Automate provisioning, configuration management, and compliance checks using Ansible or equivalent tools. Maintain configuration backups, change traceability, and rollback capabilities. Ensure consistency between technical documentation and the actual deployed network infrastructure.\n\nCoordination & Continuous Improvement: Collaborate closely with development, infrastructure, physical security, and field teams. Provide network expertise for projects involving new sites, data center changes, telephony, video surveillance, and industrial equipment. Produce regular reporting on network availability, service quality, and infrastructure programs. Maintain active technology watch across networking, network security, and automation. Identify and recommend relevant technology and architecture improvements.