Network Architect Level III (On-site)

HEPCO•New York, NY

1d•Onsite

About The Position

HEPCO is seeking experienced Network Architects to support our client’s enterprise-wide IP address standardization initiative. These professionals will assess campus networks, design and implement new IP addressing schemes, review routing and switching environments, and develop hybrid and multi-cloud networking solutions. Assess existing IP addressing, routing, VLANs, and network dependencies across campus and data center environments. Develop and implement Re-IP strategies and migration plans for academic, administrative, wireless, data center, VoIP, and specialty networks. Design standardized IP addressing frameworks, including subnetting, summarization, segmentation, naming standards, and documentation. Identify migration risks involving DNS, DHCP, firewalls, NAC/802.1X, VPNs, load balancers, servers, printers, VoIP, IoT, and application allowlists. Develop cutover procedures, rollback plans, and risk mitigation recommendations. Audit network architecture, routing protocols, WAN connectivity, firewall segmentation, resiliency, and DNS/DHCP/IPAM practices. Document findings and prioritize recommendations based on risk and business impact. Implement approved changes during scheduled change windows, perform post-implementation testing, and provide support to maintain network stability. Design and refine hybrid and multi-cloud connectivity, routing, failover, traffic segmentation, and security zoning. Evaluate load balancing solutions, including Layer 4/Layer 7 services, SSL/TLS offload, health monitoring, WAF integration, and disaster recovery. Prepare design documentation and change procedures, and provide knowledge transfer to network engineering and operations staff.

Requirements

More than seven years of experience working on complex projects, including at least two years in a leadership role.
At least seven years of hands-on Network Architect experience with expert-level routing and switching skills.
Expertise in IP address planning, Cisco network configuration, EIGRP, spanning tree, VoIP/QoS, Wi-Fi technologies, firewalls, hosts, servers, storage, and NAC devices.
Experience supporting network readdressing initiatives, routing and switching reviews, and implementation planning.
Deep knowledge of enterprise networking, IP addressing and segmentation, network security, load balancing, and hybrid/multi-cloud connectivity.
Experience with Infoblox DDI and load balancing architecture.
Ability to assess technical and operational risks and develop target-state designs across on-premises and cloud environments.
Provide own Windows-capable laptop.

Nice To Haves

Experience supporting complex, multi-site network environments.

Responsibilities

Assess campus networks, design and implement new IP addressing schemes, review routing and switching environments, and develop hybrid and multi-cloud networking solutions.
Assess existing IP addressing, routing, VLANs, and network dependencies across campus and data center environments.
Develop and implement Re-IP strategies and migration plans for academic, administrative, wireless, data center, VoIP, and specialty networks.
Design standardized IP addressing frameworks, including subnetting, summarization, segmentation, naming standards, and documentation.
Identify migration risks involving DNS, DHCP, firewalls, NAC/802.1X, VPNs, load balancers, servers, printers, VoIP, IoT, and application allowlists.
Develop cutover procedures, rollback plans, and risk mitigation recommendations.
Audit network architecture, routing protocols, WAN connectivity, firewall segmentation, resiliency, and DNS/DHCP/IPAM practices.
Document findings and prioritize recommendations based on risk and business impact.
Implement approved changes during scheduled change windows, perform post-implementation testing, and provide support to maintain network stability.
Design and refine hybrid and multi-cloud connectivity, routing, failover, traffic segmentation, and security zoning.
Evaluate load balancing solutions, including Layer 4/Layer 7 services, SSL/TLS offload, health monitoring, WAF integration, and disaster recovery.
Prepare design documentation and change procedures, and provide knowledge transfer to network engineering and operations staff.