Network Architect (Security)

About

Important Note: Only submit vetted candidates on below skillset:

1. Palo Alto firewall or security (Must have)
2. SD-WAN - Cisco
3. Networking

Role Details

• Title: Network Architect (Security)
• Location: Richmond, VA onsite
• Duration: 3-6 months (Contract to hire)

Top Skills

• Architect level- 15+ years of experience in enterprise networking
• Deep expertise in BGP routing and network design
• Strong hands-on experience with:
  • Palo Alto Networks firewalls
  • Cisco SD-WAN (Viptela)

Key Responsibilities

Architecture & Design

• Lead design and implementation of enterprise and cloud networking architectures (Azure, AWS, hybrid)
• Develop and execute network consolidation strategies across multiple environments and business units
• Architect secure, scalable connectivity patterns including:
  • Site-to-site and client VPNs
  • SD-WAN deployments
  • Cloud transit hubs and hub/spoke models
• Define standards for routing, segmentation, and high availability

Cloud Networking

• Design and manage networking in Azure and familiarity AWS, and GCP.
• Implement and maintain:
  • Virtual networks (VNets/VPCs)
  • Peering and private connectivity (ExpressRoute, Direct Connect)
  • Network security controls (NSGs, firewalls, routing tables)
• Integrate on-prem and cloud environments.

Routing & Core Networking

• Design and troubleshoot complex routing environments using:
  • BGP, OSPF/EIGRP
• Optimize routing policies for performance, failover, and traffic engineering
• Lead troubleshooting of latency, packet loss, and asymmetric routing issues

Security & Firewalls

• Manage next-gen firewall solutions, primarily:
  • Palo Alto Networks firewalls (PAN-OS, Panorama)
• Define and enforce security policies, NAT, and segmentation strategies
• Partner with security teams on threat mitigation and compliance requirements

SD-WAN & Branch Networking

• Design and support SD-WAN solutions using:
  • Cisco Viptela / Cisco SD-WAN
• Manage and optimize branch networking using:
  • Cisco Meraki (full stack: MX, MS, MR)
• Ensure consistent policy, performance, and visibility across all sites

Carrier & Vendor Management

• Act as primary technical liaison with telecom carriers and ISPs
• Lead troubleshooting of circuit issues (latency, outages, routing anomalies)
• Validate and design circuit turn-ups (DIA, MPLS, broadband, LTE/5G)
• Coordinate with vendors during deployments, escalations, and outages

Operations & Leadership

• Serve as Tier 3 escalation point for network-related incidents
• Mentor junior engineers and provide technical guidance
• Develop and maintain documentation, standards, and runbooks
• Participate in on-call rotation as needed

Required Qualifications

• Years of experience – Architect level 15+
• Deep expertise in BGP routing and network design
• Strong hands-on experience with:
  • Palo Alto Networks firewalls
  • Cisco SD-WAN (Viptela)
  • Cisco Meraki full stack
• Proven experience designing and implementing cloud networking architectures
• Strong troubleshooting skills across routing, firewall, and connectivity domains
• Experience working directly with telecom carriers and ISPs

Preferred Qualifications

• Experience with:
  • Multi-tenant or multi-environment network consolidation
• Certifications (preferred but not required):
  • CCNP/CCIE
  • PCNSE (Palo Alto)
  • Azure Network Engineer Associate (AZ-700)
  • AWS Advanced Networking Specialty