Senior Staff Network Architect, IT Infrastructure

SoFi Tech Solutions•San Francisco, CA

4d•$163,200 - $280,500

About The Position

As Network Architect, you will own the design of SoFi's corporate network across offices, data centers, the cloud, and remote access. You will set standards, lead initiatives from design through rollout, and collaborate with Network Operations, SRE, Cloud Engineering, and Cybersecurity to ensure the network is secure, resilient, and audit-ready in a regulated financial-services environment.

Requirements

10+ years in enterprise networking, including 3+ years in an architect or senior lead role.
Bachelor’s or master’s degree in Computer Science, Information Technology, Engineering, or a related field.
Deep knowledge of routing and switching, including BGP, OSPF, VLANs, LACP, and stacking, as well as IPsec.
Hands-on experience with Cisco Catalyst or Meraki.
Experience designing and operating SASE/SSE or zero-trust platforms.
Experience with next-generation firewalls; Palo Alto Networks products such as PA-series, Panorama, and GlobalProtect are preferred.
Proven AWS networking skills, including VPC design, Transit Gateway, Direct Connect, Route 53, NLB/ALB, and Network Firewall.
Experience designing enterprise wireless, including site surveys and heat mapping.
Familiarity with identity-aware networking, including Okta, AD, and 802.1X/NAC.
A track record of delivering multi-site network changes with minimal disruption.
Clear written communication skills, including architecture documentation, decision records, and leadership briefings.

Nice To Haves

Zscaler experience with ZIA, ZPA, Branch Connector, or Zero Trust Branch.
Experience at a bank, fintech, or other regulated company, including SOX, PCI DSS, or FFIEC environments.
Experience with Cloudflare DNS, WAF, or mTLS; Aviatrix; or AWS WorkSpaces/VDI networking.
Network automation and infrastructure-as-code skills, such as Python, Terraform, Ansible, or APIs.
Experience with Datadog Network Monitoring and NetFlow analytics.
Certifications such as CCNP/CCIE, PCNSE, Zscaler ZDTA/ZDTE, or AWS Advanced Networking Specialty.
International site experience in LATAM or APAC.
Aruba/HPE Wi-Fi 6/6E experience.

Responsibilities

Own the target architecture for the corporate network across offices, colocation data centers, and corporate AWS; maintain reference designs, standards, and the roadmap.
Design hybrid-cloud connectivity using AWS Transit Gateway, Direct Connect, site-to-site IPsec/BGP, PrivateLink, and AWS Network Firewall.
Evolve the office café model, including wireless-first design, dual diverse ISP paths, redundant security edges, Cisco Catalyst 9300 switching, and Aruba Wi-Fi 6E, targeting 99.99% monthly uptime per site.
Drive the modernization roadmap for 802.1X/NAC, out-of-band management, end-to-end QoS/DSCP, segmentation and microsegmentation, throughput baselines, and NetFlow-based analytics.
Set DNS and traffic standards, including Route 53 private DNS and resolvers, Cloudflare public DNS/WAF/CDN, and AWS load-balancing patterns.
Define monitoring, alerting, and telemetry standards in Datadog, SNMP, and NetFlow, keeping them synchronized with the ServiceNow CMDB.
Partner with Cybersecurity on Palo Alto Panorama and Zscaler policy, segmentation, and audit evidence for SOX, PCI, and banking-regulator requirements.
Help define a hybrid managed-service (NaaS) operating model; evaluate vendors and integrators, own architecture decisions, and oversee partners responsible for execution.
Create reusable playbooks for new offices, office refreshes, and migrations.
Mentor engineers and review designs and changes.