Job Type
Full-time
Description
About The RoleA
Network Architect at Lockstep leads the design and delivery of secure, scalable network and security solutions for our clients. This role owns complex project architecture and escalation, strengthens team capability through mentorship, and helps clients maintain reliable, high-performing network environments.
What You'll Own- Architect, design, and deploy secure, functional network solutions across switching, routing, wireless, firewalls, NAC, SD-WAN, load balancing, and monitoring environments.
- Lead medium-to-large network and security projects from technical planning through implementation and delivery, including greenfield deployments and migrations.
- Provide expert escalation support for complex networking, firewall, and load balancer issues; investigate root causes and recommend durable resolutions.
- Govern and enforce network and security standards, and review and approve technical designs and documentation.
- Create, oversee, and test security controls, including network access and intrusion-prevention measures and 802.1X implementations.
- Assess network performance, capacity, and scalability; identify risks and recommend improvements to reliability and service quality.
- Mentor network engineering and security team members, provide technical guidance, and support the development of less senior engineers.
- Communicate project status, technical findings, and recommendations clearly to clients, including non-technical stakeholders.
Requirements
What We're Looking For- Required certification: CCIE Enterprise Infrastructure
- 10+ years of experience in senior network engineering, including hands-on network architecture, design, implementation, and administration.
- Demonstrated experience leading medium-to-large networking and security projects.
- Strong knowledge of core infrastructure services: switching (VLANs, STP, LACP, MLAG); routing (static, OSPF, BGP, EIGRP); wireless (802.11a/b/g/n/ac/ax, captive portals, and channel management); DHCP; DNS; 802.1X; LLDP; SNMP; syslog; and ACLs.
- Ability to deploy and maintain firewalls and help keep networks secure, including designing and validating network access and intrusion-prevention controls.
- Hands-on experience in at least six of the following: Extreme switching/routing/fabric; Extreme NAC/XMC; Cisco switching/routing; SonicWall or ASA firewall migrations to Palo Alto or FortiGate; Citrix NetScaler; greenfield or brownfield ASA, FortiGate, or Palo Alto deployments; controller-based Cisco, Aruba, or Extreme wireless; SD-WAN (such as VeloCloud, Silver Peak, Palo Alto, or Citrix); 802.1X at the switching layer with Microsoft PKI; advanced network/firewall/load-balancer escalation; monitoring tools such as PRTG, LogicMonitor, or SolarWinds; and in-depth configuration analysis with recommendations.
- Proficiency in a general-purpose scripting language such as PowerShell or Python.
- Strong analytical troubleshooting skills, including the ability to isolate where a problem originates, resolve it, and recommend ways to prevent recurrence.
- Ability to evaluate network performance, capacity, and scalability and make practical recommendations.
- Ability to provide technical mentorship and escalation support to less senior network engineering and security team members.
- Excellent client communication skills, including the ability to explain technical issues to non-technical audiences and build productive client relationships.
- In addition to the required CCIE, at least two mid-level certifications from strategic vendors. Examples include Palo Alto PCNSA, Extreme Certified Specialist, Aruba ACCP, or ACMP. The required CCIE satisfies the expert-level certification requirement.
Helpful, But Not Required: Additional expert-level certifications, such as Palo Alto PCNSE or Aruba ACCX/ACMX.• Experience with additional strategic vendor ecosystems, including HPE, beyond the platforms represented in the required experience.
What To ExpectThe physical demands described below are representative of those required to perform the essential functions of this role. Reasonable accommodation may be made to enable individuals with disabilities to perform these functions.
Office environment: This position requires prolonged computer and desk work, occasional lifting of up to 15 pounds, and regular collaboration within a professional office environment.
Travel: Up to 15% required
Candidates must be eligible to work in the United States without current or future visa sponsorship. Employment is contingent upon successful completion of a background check.
