Sr. Network Architect

Trinity Health•Dallas, TX

9d•Onsite

About The Position

The Senior Network Architect will serve as the principal technical authority for Trinity’s enterprise network infrastructure. This role provides strategic leadership across campus, data center, cloud, and wide-area network domains; drives the adoption of modern network architectures including Zero Trust, SD-WAN, and cloud-native networking; and partners with security, cloud, and application teams to deliver resilient, scalable, and secure connectivity. The Senior Network Architect will mentor engineers, develop technology roadmaps, and translate business requirements into actionable network designs that align with Trinity’s long-term objectives.

Requirements

Bachelor’s degree in Computer Science, Information Technology, or a related field required; Master’s degree or equivalent professional experience preferred
10+ years of progressive network engineering experience, with at least 3 years in a senior architect or technical lead capacity
Active industry certification required: CCNP (Enterprise or Security), Fortinet NSE 7/8, or equivalent; cloud networking certifications (Azure Network Engineer Associate, AWS Advanced Networking) strongly preferred
Deep expertise in routing and switching: BGP, OSPF, EIGRP, MPLS, VXLAN/EVPN, STP/RSTP, 802.1Q, and QoS design
Hands-on experience with SD-WAN platforms (Cisco, Fortinet, or Palo Alto) including policy-based routing, application-aware path selection, and WAN optimization
Demonstrated experience architecting hybrid and multi-cloud network connectivity, including Azure ExpressRoute, Azure Virtual WAN, VPN Gateways, AWS Direct Connect, and cloud-native network security services
Solid grounding in network security architecture: NGFW, IDS/IPS, NAC (Cisco ISE or FortiNAC), network segmentation, Zero Trust principles, and PKI/certificate management
Proficiency in network automation and scripting: Python, Ansible, Terraform, REST APIs, NETCONF/YANG, and Git-based version control for infrastructure-as-code workflows
Experience with enterprise design, lifecycle management and relevant vendor tools (Cisco DNA Center/Catalyst Center, FortiManager, or equivalent)
Experience with enterprise wireless design and lifecycle management (WLC 9800, or equivalent) including Wi-Fi 6/6E deployment and RF planning
Familiarity with network observability platforms (SolarWinds, ThousandEyes, Cisco AppDynamics, Grafana, or similar) and experience operationalizing streaming telemetry and AIOps for proactive operations
Experience with load balancing and application delivery (Citrix ADC/NetScaler, F5, or cloud-native equivalents) and a working knowledge of TLS/SSL inspection and application layer networking
Proven ability to perform network security assessments and audits; experience remediating findings against regulatory frameworks such as NIST CSF, CIS Controls, or SOX IT General Controls
Strong vendor and carrier management skills, with experience negotiating and managing WAN/MPLS/internet circuit contracts and SLAs
Excellent written and verbal communication skills; proven ability to translate complex technical architecture into clear executive-level presentations and business cases

Responsibilities

Serve as the principal technical expert for all enterprise networking across Trinity Industries IT, including services delivered directly by Trinity and those provided by managed service and carrier partners
Design and lead the implementation of scalable, highly available network architectures across campus, data center, WAN, and multi-cloud environments
Lead the evaluation and adoption of Zero Trust Network Access (ZTNA) principles, micro-segmentation, and identity-aware networking to advance Trinity’s security posture
Own network security architecture, including next-generation firewalls (Palo Alto/Firepower/Fortigate), IDS/IPS, network access control (NAC), DNS security, and DDoS mitigation strategies
Architect and govern SD-WAN strategy, including underlay/overlay design, traffic engineering, and integration with cloud on-ramps (Azure Virtual WAN, AWS Transit Gateway)
Drive network automation and infrastructure-as-code (IaC) practices using tools such as Ansible, Terraform, Python, and CI/CD pipelines to reduce manual operations and increase deployment velocity
Establish and maintain comprehensive network observability through monitoring, telemetry (NetFlow/sFlow/streaming telemetry), and AIOps tooling to enable proactive capacity planning and rapid incident response
Develop and maintain network-centric disaster recovery, business continuity, and incident response plans; conduct regular testing to validate RTO/RPO objectives
Partner with IT Security and Compliance teams to ensure network architecture meets regulatory and audit requirements (SOX, NIST CSF, CIS Controls)
Build and maintain technology roadmaps, architecture standards, and design documentation; present recommendations and investment cases to IT leadership and executive stakeholders
Mentor and guide a team of network engineers; foster a culture of continuous learning, operational excellence, and engineering rigor