Network Architect

American IT Systems•Richmond, VA

1d•Hybrid

About The Position

We are seeking experienced Network Architects with a strong background in enterprise networking to fill two critical roles in Richmond, VA. These positions require a high level of expertise in network design, implementation, and security, with a particular focus on Palo Alto firewalls and SD-WAN solutions. The ideal candidates will be instrumental in leading the design and deployment of complex networking architectures, ensuring scalability, security, and optimal performance across on-premise and cloud environments. This is a contract-to-hire opportunity with a duration of 6 months, offering market-rate compensation and a hybrid work model based on business requirements. Local candidates or those willing to relocate to Richmond, VA are preferred.

Requirements

15+ years of experience in enterprise networking.
Deep expertise in BGP routing and network design.
Strong hands-on experience with Palo Alto Networks firewalls (PAN-OS, Panorama).
Strong hands-on experience with Cisco SD-WAN (Viptela).
Strong hands-on experience with Cisco Meraki full stack (MX, MS, MR).
Proven experience designing and implementing cloud networking architectures (Azure, AWS, GCP).
Strong troubleshooting skills across routing, firewall, and connectivity domains.
Experience working directly with telecom carriers and ISPs.
Excellent communication skills.

Nice To Haves

Experience with multi-tenant or multi-environment network consolidation.
CCNP/CCIE certification.
PCNSE (Palo Alto) certification.
Azure Network Engineer Associate (AZ-700) certification.
AWS Advanced Networking Specialty certification.

Responsibilities

Lead design and implementation of enterprise and cloud networking architectures (Azure, AWS, hybrid).
Develop and execute network consolidation strategies across multiple environments and business units.
Architect secure, scalable connectivity patterns including: Site-to-site and client VPNs, SD-WAN deployments, Cloud transit hubs and hub/spoke models.
Define standards for routing, segmentation, and high availability.
Design and manage networking in Azure and familiarity with AWS, and GCP.
Implement and maintain: Virtual networks (VNets/VPCs), Peering and private connectivity (ExpressRoute, Direct Connect), Network security controls (NSGs, firewalls, routing tables).
Integrate on-prem and cloud environments.
Design and troubleshoot complex routing environments using: BGP, OSPF/EIGRP.
Optimize routing policies for performance, failover, and traffic engineering.
Lead troubleshooting of latency, packet loss, and asymmetric routing issues.
Manage next-gen firewall solutions, primarily: Palo Alto Networks firewalls (PAN-OS, Panorama).
Define and enforce security policies, NAT, and segmentation strategies.
Partner with security teams on threat mitigation and compliance requirements.
Design and support SD-WAN solutions using: Cisco Viptela / Cisco SD-WAN.
Manage and optimize branch networking using: Cisco Meraki (full stack: MX, MS, MR).
Ensure consistent policy, performance, and visibility across all sites.
Act as primary technical liaison with telecom carriers and ISPs.
Lead troubleshooting of circuit issues (latency, outages, routing anomalies).
Validate and design circuit turn-ups (DIA, MPLS, broadband, LTE/5G).
Coordinate with vendors during deployments, escalations, and outages.
Serve as Tier 3 escalation point for network-related incidents.
Mentor junior engineers and provide technical guidance.
Develop and maintain documentation, standards, and runbooks.
Participate in on-call rotation as needed.