DMZ Network Architect

Matlen Silver; Jersey City (NJ); Hybrid; USD 160,000 - 180,000; Full time

Job summary

Matlen Silver has partnered with a leading global financial services firm to recruit a Network Architect responsible for defining an architectural vision for large, complex DMZs. You will lead DMZ network designs with SASE and Cloud designs including remote access, SDWAN, hosting, and VPN infrastructure across LOBs and B2B customers.

Responsibilities span creating solution intents, roadmaps, and design discussions; ensuring architecture remains flexible; and guiding technology choices to support

Qualifications

• 10+ years in network engineer/architect roles.
• Experience integrating Arista Fabric into DMZ networks.
• Experience integrating DMZ with cloud providers (Azure, AWS, Google, IBM).
• Experience with large scale DMZ environments and auth mechanisms (AD, Ping Federate). Must have Arista, Cisco Nexus, Firepower/ASA, Fortinet devices.
• Solid understanding of TCP/IP, SDN, OSPF/BGP, VLAN, IPSEC, PKI, QoS, MPLS, VRRP, VDC, VPC flavors.
• Ability to mitigate with DDoS tools (Arbor, Prolexic/Akamai, F5/Silverline).

Responsibilities

• Create solution intent and architectural vision for complex DMZ solutions.
• Prioritize requirements into a technology backlog to support the roadmap.
• Contribute to architecture roadmaps across domains (Business, Application, Data, Technology).
• Clarify architecture, assist with system design, and provide options to resolve impediments.
• Lead design of complex architectures with flexible, modular approaches.
• Support technology stack selection and review non-functional requirements.

Skills

Network architecture

DMZ networks

SASE

Arista

Cisco Nexus

Firepower/ASA

TCP/IP

SDN

VPN

Tools

Azure

AWS

Google Cloud

Arista Fabric

Job description

Location: Jersey City, NJ (4 days per week onsite)

Other Approved Locations: Charlotte NC, Plano TX, or Chandler AZ

Pay Scale: $160,000-180,000 annual base salary

Job Description:

Matlen Silver has partnered with a leading global financial services firm to recruit a Network Architect that will be responsible for defining an architectural vision for large, complex DMZs. Key responsibilities include designing the DMZ intent and associated operating environment, evaluating system impacts, and defining nonfunctional requirements and architectural runway to support new features and expand into new opportunities. A successful Network Architect will lead DMZ network project designs with a focus on Secure Access Service Edge (SASE) and Cloud designs including Remote Access, SDWAN, Hosting, and VPN infrastructure architecture for various LOBs and B2B customers across various DMZs.

Responsibilities:

• Works across the business, operations and technology to create the solution intent and architectural vision for complex solutions and prioritize functional and non-functional requirements into a technology backlog to enable the technology roadmap and functionality to support evolving capabilities and services
• Contributes to the creation of the architecture roadmap of defined domains (Business, Application, Data, and Technology) in support of the product roadmap and the development of best practices including standardized templates
• Clarifies the architecture, assists with system design to support implementation, and provides solution options to resolve any architectural impediments
• Facilitates solution driven discussions, leads the design of complex architectures, and finds creative solutions through knowledge of domain, practical experiments, and proof of concepts while ensuring architecture is flexible, modular, and adaptable
• Leads rapid shaping of a high-level architecture with details filled in with emerging business requirements; ensure architecture is flexible, modular, and designed to adapt easily.
• Supports the team as needed to select the technology stack required for solutions and helps select preferred technology products
• Performs design and code reviews to ensure all non-functional requirements are sufficiently met (for example, security, performance, maintainability, scalability, usability, and reliability)

Required Qualifications:

• 10+ years industry experience within network engineer and architect level roles.
• Experience integrating Arista Fabric solutions into DMZ networks.
• Experience integrating DMZ solutions with Cloud provider environments such as MS Azure, AWS, Google, IBM.
• Experience with large scale, complex network/DMZ environments and Authentication mechanisms (e.g. Active Directory, Ping federate)Must have Arista, Cisco Nexus, Firepower/ASA, and Fortinet router and switch experience.
• Solid understanding of TCP/IP concepts, SDN, OSPF, BGP, VLAN, IPSEC, ISAKMP, PKI, QOS, Multicast, trunking/port-channeling, VRRP, FHRP protocols, enterprise level MPLS, VDC, flavors of VPC, SDN.
• Ability to utilize DDoS tools like Arbor and Prolexic/Akamai & F5/Silverline for mitigations to include Application layer, TCP state table and Bandwidth DDoS threats.

Experience Matters. Let your experience be driven by our experience. For more than 40 years, Matlen Silver has delivered solutions for complex talent and technology needs to Fortune 500 companies and industry leaders. Led by hard work, honesty, and a trusted team of experts, we can say that Matlen Silver technology has created a solutions experience and legacy of success that is the difference in the way the world works.

Matlen Silver is an Equal Opportunity Employer and considers all applicants for all positions without regard to race, color, religion, gender, national origin, age, sexual orientation, veteran status, the presence of a non-job-related medical condition or disability, or any other legally protected status.

If you are a person with a disability needing assistance with the application or at any point in the hiring process, please contact us at email and/or phone at: [e-mail] // 908-393-8600.