Network Architect

Astreya•Santa Clara, CA

About The Position

The Network Architect designs and optimizes secure, scalable network architectures using Palo Alto firewall and Juniper switching, routing, wireless, and security technologies. The role supports hybrid work solutions for hi-tech clients, ensuring robust connectivity, strong security, and operational efficiency across complex enterprise environments. The architect also mentors technical teams and aligns network designs with business outcomes. The position works across enterprise network and security architecture, including wired and wireless infrastructure, firewall policy and segmentation, routing and switching, cloud networking, automation, and operational troubleshooting. It involves producing high- and low-level design documentation, coordinating deployment and change activities, improving monitoring and observability, and ensuring that designs align with corporate compliance policies and industry regulations. The role requires 8+ years of experience designing and operating large-scale enterprise network environments, hands-on experience with Juniper and Palo Alto technologies, and the required vendor certifications. The listed base salary range is $132,240.00–$208,800.00 USD. Astreya describes a comprehensive benefits package for regular, full-time employees; eligibility and specific benefits may vary as stated in the posting.

Requirements

8+ years of experience designing and operating large-scale enterprise network environments.
Extensive hands-on experience with Palo Alto firewall platforms, including policy design, threat prevention, and integration with security operations tools in large enterprise environments.
Strong expertise in Juniper switching and routing, including designing, implementing, and maintaining core and distribution layers for high availability and scalable growth.
Advanced capability designing and operating wireless networking solutions using Juniper Mist wired and wireless platforms, with attention to user density, performance, and seamless roaming.
Knowledge of Juniper firewall solutions, including security zones, policies, and VPN services.
Practical exposure to hi-tech industry environments with complex products, rapid innovation cycles, and strict reliability expectations.
Proficiency in hybrid work network considerations, including secure remote access, user-group segmentation, and performance tuning for collaboration and engineering workloads.
Strong analytical, communication, and documentation skills, including the ability to articulate architectural decisions and engage effectively with global teams.
Strong hands-on expertise with Juniper platforms, including Mist, wireless, routing, switching, and SD-WAN.
Strong experience with Palo Alto security technologies.
Experience with load-balancing platforms such as Avi, F5, or similar technologies.
Experience with cloud networking in Microsoft Azure.
Working experience in network automation and scripting.
Palo Alto Networks Certified Network Security Engineer certification.
Juniper Networks JNCIP Security certification or equivalent vendor certifications relevant to firewall and routing technologies.

Responsibilities

Design enterprise network architectures integrating Palo Alto firewalls with Juniper switching, routing, and wireless solutions for complex hybrid environments.
Develop scalable network security designs using Palo Alto policies, next-generation capabilities, and segmentation strategies to protect critical applications and data.
Create high- and low-level design documentation for wired and wireless infrastructure using Juniper hardware and Juniper Mist platforms.
Optimize routing and switching configurations across Juniper devices for performance, low latency, and resilient connectivity.
Configure and refine Juniper Mist wired and wireless solutions for stable, secure user experiences across offices, labs, and hybrid work locations.
Review firewall rules, security policies, and network access controls across Palo Alto and Juniper firewall environments to identify risks and standardize configurations.
Collaborate with cross-functional teams in hi-tech domains to translate business needs into network and security designs supporting product development, cloud adoption, and digital transformation.
Guide operational teams in analyzing and troubleshooting firewall, switching, routing, and wireless incidents, and transfer knowledge to help prevent recurrence.
Implement monitoring, logging, and observability across Palo Alto and Juniper infrastructure to proactively detect performance issues, security events, and capacity trends.
Evaluate emerging technologies in the Palo Alto and Juniper ecosystems and recommend improvements to automation, resilience, and sustainability.
Align network design standards and security controls with corporate compliance policies and industry regulations.
Coordinate change planning, testing, and cutovers for network and security deployments while minimizing service disruption and communicating with stakeholders.
Mentor peers and junior architects on firewall design, advanced routing strategies, and wireless optimization.

Benefits

Medical insurance through UHC (PPO, HSA, and Surest options) or Kaiser (HMO option for California employees only).
Dental insurance through UHC Nationwide.
Vision insurance through UHC.
Flexible Spending Account for health and dependent care.
Pre-tax commuter benefit for parking and transit, depending on location.
Continuing education and professional development through platforms such as Udemy and Coursera.
Corporate wellness program provided by Goomi Group.
Employee Assistance Program.
Wellness Days.
401(k) plan.
Basic and supplemental life insurance.
Short-term and long-term disability insurance.
Critical illness, critical hospital, and voluntary accident insurance.
Tuition reimbursement, available six months after start date and subject to a cap.
Paid Time Off accrued and prorated, up to 120 hours annually.
Paid holidays.
Statutory leaves, paid time, and other ancillary benefits required under state and federal law.