Principle Network Architect

Astreya•Boulder, CO

2d•$55 - $87

About The Position

This role is responsible for owning the network architecture standards and the Building Block topology framework for the physical security estate. The architect will set the designs that the senior team builds against, define perimeter-resilience and high-availability strategies, and establish network security and configuration standards. This position also involves owning the network hardware and firmware lifecycle strategy, serving as the final escalation point for complex network incidents, and mentoring senior network engineers.

Requirements

10+ years of enterprise network engineering, including architecture leadership and standards ownership in large or critical environments.
Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switching and segmentation expertise.
Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, including survivability strategy for critical zones.
Strong network automation and zero-touch-config leadership (Python / Ansible) and standards definition.
Monitoring and inventory architecture (NetBox, SolarWinds, PRTG, Syslog); hardware / firmware lifecycle and vendor management.
Demonstrated network architecture leadership — standards ownership, cross-functional partnership, mentoring and escalation leadership.
Required Certifications: Cisco CCNP or Juniper JNCIS.
Strongly preferred Certifications: CCIE or equivalent architect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.

Nice To Haves

network automation (Python / Ansible)
ERPS / MSTP design
ITIL 4
CCIE or equivalent architect-level credential

Responsibilities

Own the network architecture standards and Building Block topology framework for the physical security estate, setting the designs the senior team builds against.
Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecture standards and cable-cut survivability requirements for critical zones.
Establish network security and configuration standards, and the zero-touch-config automation strategy that governs deployment at scale.
Set monitoring, inventory and observability standards (NetBox, SolarWinds, PRTG, Syslog) for the network estate.
Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendor selection across Cisco / Juniper / Arista.
Serve as the final escalation point for the most complex network incidents and architectural decisions.
Partner with the Infrastructure Engineering team and program leadership to align network architecture with shared security boundaries, governance, SLAs and KPIs.
Author and approve network architecture standards, design documentation and runbooks; drive continuous improvement of resilience and security posture.
Mentor and develop senior network engineers, establishing best practices and building long-term network engineering capability.

Benefits

Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
Dental provided through UHC
Nationwide Vision provided by UHC
Flexible Spending Account for Health & Dependent Care
Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
Corporate Wellness Program provided by Goomi Group
Employee Assistance Program
Wellness Days
401k Plan
Basic and Supplemental Life Insurance
Short Term & Long Term Disability
Critical Illness, Critical Hospital, and Voluntary Accident Insurance
Tuition Reimbursement (available 6 months after start date, capped)
Paid Time Off (accrued and prorated, maximum of 120 hours annually)
Paid Holidays
Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law