Network Architect

Title: Network Architect (Security)Location: Richmond, VA (Day 1 Onsite)Duration: 6+ months with possible extensions (Contract to hire) Top skills:Architect level- 15+ years of experience in enterprise networkingDeep expertise in BGP routing and network designStrong hands-on experience with:Palo Alto Networks firewallsCisco SD-WAN (Viptela)Senior Network Engineer – Cloud & Enterprise NetworkingKey ResponsibilitiesArchitecture & DesignLead design and implementation of enterprise and cloud networking architectures (Azure, AWS, hybrid)Develop and execute network consolidation strategies across multiple environments and business unitsArchitect secure, scalable connectivity patterns including:Site-to-site and client VPNsSD-WAN deploymentsCloud transit hubs and hub/spoke modelsDefine standards for routing, segmentation, and high availabilityCloud NetworkingDesign and manage networking in Azure and familiarity AWS, and GCPImplement and maintain:Virtual networks (VNets/VPCs)Peering and private connectivity (ExpressRoute, Direct Connect)Network security controls (NSGs, firewalls, routing tables)Integrate on-prem and cloud environments.Routing & Core NetworkingDesign and troubleshoot complex routing environments using:BGP, OSPF/EIGRPOptimize routing policies for performance, failover, and traffic engineeringLead troubleshooting of latency, packet loss, and asymmetric routing issuesSecurity & FirewallsManage next-gen firewall solutions, primarily:Palo Alto Networks firewalls (PAN-OS, Panorama)Define and enforce security policies, NAT, and segmentation strategiesPartner with security teams on threat mitigation and compliance requirementsSD-WAN & Branch NetworkingDesign and support SD-WAN solutions using:Cisco Viptela / Cisco SD-WANManage and optimize branch networking using:Cisco Meraki (full stack: MX, MS, MR)Ensure consistent policy, performance, and visibility across all sitesCarrier & Vendor ManagementAct as primary technical liaison with telecom carriers and ISPsLead troubleshooting of circuit issues (latency, outages, routing anomalies)Validate and design circuit turn-ups (DIA, MPLS, broadband, LTE/5G)Coordinate with vendors during deployments, escalations, and outagesOperations & LeadershipServe as Tier 3 escalation point for network-related incidentsMentor junior engineers and provide technical guidanceDevelop and maintain documentation, standards, and runbooksParticipate in on-call rotation as neededRequired QualificationsYears of experience – Architect level 15+Deep expertise in BGP routing and network designStrong hands-on experience with:Palo Alto Networks firewallsCisco SD-WAN (Viptela)Cisco Meraki full stackProven experience designing and implementing cloud networking architecturesStrong troubleshooting skills across routing, firewall, and connectivity domainsExperience working directly with telecom carriers and ISPsPreferred QualificationsExperience with:Multi-tenant or multi-environment network consolidationCertifications (preferred but not required):CCNP/CCIEPCNSE (Palo Alto)Azure Network Engineer Associate (AZ-700)AWS Advanced Networking Specialty