Senior Network Architect

Trinity Structural Towers; Santiago de Querétaro; Presencial; MXN 1.200.000 - 1.800.000; Jornada completa

Descripción de la vacante

Trinity Industries is seeking a Sr. Network Architect to lead our enterprise network infrastructure across campus, data center, cloud and WAN domains. You will drive modern architectures including Zero Trust, SD-WAN, and cloud-native networking while partnering with security, cloud, and application teams.

The role includes mentoring engineers, developing technology roadmaps, and translating business needs into resilient, scalable network designs that align with Trinity’s long-term objectives.

Descripción del empleo

Trinity Industries is hiring a Sr. Network Architect to support our enterprise network infrastructure. This role will provide strategic leadership across campus, data center, cloud and wide-area network domains; drive the adoption of modern network architectures including Zero Trust, SD-WAN, and cloud-native networking; and partner with security, cloud, and application teams to deliver resilient, scalable, and secure connectivity. Additionally, the Senior Network Architect will mentor engineers, develop technology roadmaps, and translate business requirements into actionable network designs that align with Trinity’s long-term objectives.

What you’ll do:

• Serve as the principal technical expert for all enterprise networking across Trinity Industries IT, including services delivered directly by Trinity and those provided by managed service and carrier partners
• Design and lead the implementation of scalable, highly available network architectures across campus, data center, WAN, and multi-cloud environments
• Lead the evaluation and adoption of Zero Trust Network Access (ZTNA) principles, micro-segmentation, and identity-aware networking to advance Trinity’s security posture
• Own network security architecture, including next-generation firewalls (Palo Alto/Firepower/Fortigate), IDS/IPS, network access control (NAC), DNS security, and DDoS mitigation strategies
• Architect and govern SD-WAN strategy, including underlay/overlay design, traffic engineering, and integration with cloud on-ramps (Azure Virtual WAN, AWS Transit Gateway)
• Drive network automation and infrastructure-as-code (IaC) practices using tools such as Ansible, Terraform, Python, and CI/CD pipelines to reduce manual operations and increase deployment velocity
• Establish and maintain comprehensive network observability through monitoring, telemetry (NetFlow/sFlow/streaming telemetry), and AIOps tooling to enable proactive capacity planning and rapid incident response
• Develop and maintain network-centric disaster recovery, business continuity, and incident response plans; conduct regular testing to validate RTO/RPO objectives
• Partner with IT Security and Compliance teams to ensure network architecture meets regulatory and audit requirements (SOX, NIST CSF, CIS Controls)
• Build and maintain technology roadmaps, architecture standards, and design documentation; present recommendations and investment cases to IT leadership and executive stakeholders
• Mentor and guide a team of network engineers; foster a culture of continuous learning, operational excellence, and engineering rigor
  

What You’ll Need:

• Bachelor’s degree in Computer Science, Information Technology, or a related field required; Master’s degree or equivalent professional experience preferred
• 10+ years of progressive network engineering experience, with at least 3 years in a senior architect or technical lead capacity
• Active industry certification required: CCNP (Enterprise or Security), Fortinet NSE 7/8, or equivalent; cloud networking certifications (Azure Network Engineer Associate, AWS Advanced Networking) strongly preferred
• Deep expertise in routing and switching: BGP, OSPF, EIGRP, MPLS, VXLAN/EVPN, STP/RSTP, 802.1Q, and QoS designHands-on experience with SD-WAN platforms (Cisco, Fortinet, or Palo Alto) including policy-based routing, application-aware path selection, and WAN optimization
• Demonstrated experience architecting hybrid and multi-cloud network connectivity, including Azure ExpressRoute, Azure Virtual WAN, VPN Gateways, AWS Direct Connect, and cloud-native network security services
• Solid grounding in network security architecture: NGFW, IDS/IPS, NAC (Cisco ISE or FortiNAC), network segmentation, Zero Trust principles, and PKI/certificate management
• Proficiency in network automation and scripting: Python, Ansible, Terraform, REST APIs, NETCONF/YANG, and Git-based version control for infrastructure-as-code workflows
• Experience with enterprise design, lifecycle management and relevant vendor tools (Cisco DNA Center/Catalyst Center, FortiManager, or equivalent)
• Experience with enterprise wireless design and lifecycle management (WLC 9800, or equivalent) including Wi-Fi 6/6E deployment and RF planning
• Familiarity with network observability platforms (SolarWinds, ThousandEyes, Cisco AppDynamics, Grafana, or similar) and experience operationalizing streaming telemetry and AIOps for proactive operations
• Experience with load balancing and application delivery (Citrix ADC/NetScaler, F5, or cloud-native equivalents) and a working knowledge of TLS/SSL inspection and application layer networking
• Proven ability to perform network security assessments and audits; experience remediating findings against regulatory frameworks such as NIST CSF, CIS Controls, or SOX IT General Controls
• Strong vendor and carrier management skills, with experience negotiating and managing WAN/MPLS/internet circuit contracts and SLAs
• Excellent written and verbal communication skills; proven ability to translate complex technical architecture into clear executive-level presentations and business cases