The role:As Network Architect, you will own the design for SoFi's corporate network across offices, data centers, the cloud and remote access. You will set standards, lead key initiatives from design through rollout, and work with Network Operations, SRE, Cloud Engineering and Cybersecurity. Together you'll make sure the network is secure, resilient and ready for audits in a regulated financial-services setting.
What you'll do:- Own the target architecture for the corporate network across offices, colocation data centers and corporate AWS. Maintain reference designs, standards and the roadmap.
- Design hybrid cloud connectivity: AWS Transit Gateway, Direct Connect, site-to-site IPsec/BGP, PrivateLink and AWS Network Firewall.
- Evolve the office "café model": a wireless-first design with dual diverse ISP paths, redundant security edges, stacked Cisco Catalyst 9300 switching and Aruba Wi-Fi 6E (AP-635, Aruba Central). The target is 99.99% monthly uptime per site.
- Drive the modernization roadmap: 802.1X/NAC, out-of-band management, end-to-end QoS/DSCP, segmentation and microsegmentation, throughput baselines, and NetFlow-based analytics.
- Set DNS and traffic standards: Route 53 private DNS and resolvers, Cloudflare public DNS/WAF/CDN, and AWS load balancing patterns.
- Make the network observable: define monitoring, alerting and telemetry standards in Datadog, SNMP and NetFlow, kept in sync with the ServiceNow CMDB.
- Partner on security and compliance: work with Cybersecurity on Palo Alto Panorama and Zscaler policy, segmentation, and audit evidence for SOX, PCI and banking regulator requirements.
- Shape the operating model: help define a hybrid managed-service (NaaS) approach. Evaluate vendors and integrators, and own the architecture decisions while partners handle execution.
- Create reusable playbooks for new offices, office refreshes and migrations. Mentor engineers and review designs and changes.
What you'll need:- 10+ years in enterprise networking, including 3+ years in an architect or senior lead role.
- Education & Minimum Experience Requirements: Bachelor's Degree OR Master's Degree in Computer Science, Information Technology, Engineering, or a related field.
- Deep knowledge of routing and switching (BGP, OSPF, VLANs, LACP, stacking) and IPsec. Hands-on experience with Cisco Catalyst or Meraki.
- Experience designing and running SASE/SSE or zero trust platforms. Zscaler (ZIA, ZPA, Branch Connector, Zero Trust Branch) is strongly preferred.
- Experience with next-generation firewalls, ideally Palo Alto Networks (PA-series, Panorama, GlobalProtect).
- Proven AWS networking skills: VPC design, Transit Gateway, Direct Connect, Route 53, NLB/ALB and Network Firewall.
- Experience designing enterprise wireless, ideally Aruba/HPE Wi-Fi 6/6E, including site surveys and heat mapping.
- Familiarity with identity-aware networking (Okta, AD, 802.1X/NAC).
- A track record of delivering multi-site network changes with minimal disruption.
- Clear written communication: architecture docs, decision records and briefings for leadership.
Nice to have:- Experience at a bank, fintech or other regulated company (SOX, PCI DSS, FFIEC).
- Experience with Cloudflare (DNS, WAF, mTLS), Aviatrix, or AWS WorkSpaces/VDI networking.
- Network automation and infrastructure-as-code skills (Python, Terraform, Ansible, APIs).
- Experience with Datadog Network Monitoring and NetFlow analytics.
- Certifications such as CCNP/CCIE, PCNSE, Zscaler ZDTA/ZDTE, or AWS Advanced Networking Specialty.
- International site experience (LATAM, APAC).
Compensation and BenefitsThe base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate's experience, skills, and location.
This role may also be eligible for a bonus and/or long term incentives. Your recruiter will provide more information to you. All roles are eligible for competitive benefits. More information about our employee benefits can be found in the link below.
BenefitsTo view all of our comprehensive and competitive benefits, visit our
Benefits at SoFi & Galileo page!
US-Based Base Compensation
$163,200-$280,500 USD
Internal EmployeesIf you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.
