Enterprise Management Architect

Starcom Consultant; Tampa (FL); On-site; USD 150,000 - 210,000; Full time

Job summary

Starcom Consultant seeks a Senior Network Architect to design and govern enterprise and OT networks, aligning with business goals, tech strategies, and security requirements across IT and OT. You will guide LAN/WAN, cloud networking, security controls, and governance for scalable architectures that support operations and compliance.

The role emphasizes collaboration with OT, cybersecurity, compliance, and other teams to deliver resilient networks, documentation, and roadmaps with modern security

Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Network Engineering, Telecommunications, or related discipline is required.
• 15+ years of progressive technical leadership in IT with 10+ years in network architecture and 3+ years in IT/OT network design.
• Certification as CCIE, CISSP, AWS Advanced Networking, or CISM is required.

Responsibilities

• Architect and drive the implementation of complex networks across IT and OT with security alignment.
• Lead LAN/WAN, data center, cloud, and wireless network design and security implementations.
• Develop and maintain enterprise network architecture roadmaps, diagrams, and governance.
• Develop and enforce network security policies including firewalls, VPNs, and segmentation.
• Lead architecture initiatives, vendor evaluations, and cross-functional collaboration.
• Maintain network documentation and compliance with standards, including NERC CIP and ISA/IEC 62443.
• Provide escalation support, on-call coverage, and training for peers.

Skills

NERC CIP Compliance

SCADA/ICS Network

ISA/IEC 62443

NIST SP 800-82

TOGAF

Zero Trust Architecture

Cloud Networking

SD-WAN

Firewalls & SIEM

NSX & SDN

IPv4/IPv6 & NAT

Industrial Protocols

NetFlow/gNMI/Prometheus

DR/BCP Planning

MITRE ATT&CK

Education

Bachelor's degree in Computer Science/Engineering/related

CCIE

CISSP

AWS Certified Advanced Networking – Specialty

CISM

TOGAF knowledge

Tools

Palo Alto / Fortinet

Splunk / QRadar

AWS / Azure / GCP

NSX / NVS

OpenFlow / OpenDaylight

Job description

• Network Monitoring & Telemetry: NetFlow, sFlow, IPFIX, gRPC, gNMI, Prometheus, Grafana

****Must be a US Citizen or Green Card Holder****

Some knowledge / experience in Utilities / SCADA is helpful

Position Summary Description

Directly accountable for designing and governing the enterprise and utility-specific network architecture to ensure alignment with business goals, technology strategies, and security requirements.

Provide strategically focused direction, technical leadership, and architectural oversight for all network-related initiatives, including LAN/WAN, cloud networking, network security, and emerging technologies.

Ensure all network security controls are implemented and managed in accordance with appropriate security principles, industry best practices, and applicable industry standards, including NERC CIP, ISA/IEC 62443, and NIST SP 800-82 regulatory compliance standards.

Partner and collaborate with infrastructure, operational technology (OT), cybersecurity, compliance, and other teams to effectuate scalable, secure, and resilient network architectures that support business and operational objectives and requirements.

May serve as a project manager on network infrastructure projects and cross-train peers and other department team members, supporting knowledge sharing and development.

Qualifications And Education Requirements

Bachelor’s degree in Computer Science, Computer Engineering, Network Engineering, Telecommunications, or related discipline is required.

Minimum of fifteen (15) years of progressive technical leadership experience in information technology space, with at least ten (10) years in network architecture or advanced network design roles in medium to large-scale environments and at least three (3) years of experience designing networks for both Information Technology (IT) and Operational Technology (OT) environments.

Certification as a Cisco Certified Internetwork Expert (CCIE), Certified Information Systems Security Professional (CISSP), AWS Certified Advanced Networking – Specialty, or Certified Information Security Manager (CISM) is required.

Familiarity with architecture frameworks such as The Open Group Architecture Framework (TOGAF), and design methodologies like Zero Trust Architecture, defense-in-depth, and secure by design are a plus.

Core Technical Skills & Industry Keywords

• NERC CIP Compliance & OT Security Regulatory Frameworks
• SCADA (Supervisory Control and Data Acquisition) and ICs (Industrial Control Systems) Network Architecture
• ISA/IEC 62443 (Cybersecurity for Industrial Automation and Control Systems)
• NIST SP 800-82 (Guide to Industrial Control Systems Security)
• Zero Trust Architecture (ZTA), Software-Defined Perimeter (SDP), and Identity-Aware Proxy (IAP)
• IT/OT Convergence, OT Network Segmentation, and Cross-Zone Communication Controls
• Cloud Networking (AWS, Azure, GCP), Hybrid Cloud Interconnectivity, and Cloud Security Posture Management (CSPM)
• SD-WAN, MPLS, 5G/Cellular Networking, Wi-Fi 6/6E/7, and Wireless Industrial Protocols (e.g., Zigbee, LoRaWAN)
• Routing & Switching: BGP, OSPF, EIGRP, IS-IS, VLANs, VRFs, MPLS Label Switching
• Network Security Tools: Firewalls (Palo Alto, Fortinet), IDS/IPS, SIEM (e.g., Splunk, QRadar), EDR/XDR
• Network Virtualization (NSX, NVS), SDN (OpenFlow, OpenDaylight), and Network Function Virtualization (NFV)
• IPv4/IPv6 Addressing, Subnetting, CIDR, Multicast, and Network Address Translation (NAT)
• Industrial Protocols: Modbus, DNP3, Profinet, OPC UA, IEC 61850
• Network Monitoring & Telemetry: NetFlow, sFlow, IPFIX, gRPC, gNMI, Prometheus, Grafana
• Disaster Recovery, Business Continuity Planning (BCP), and Redundant Network Topologies
• Threat Intelligence Integration, MITRE ATT&CK Framework, and Adversarial Modeling

Essential Functions

Architect and drive the implementation of complex networks infrastructures, in collaboration with engineering, operations, compliance, and other business technology teams, to ensure network designs align with security policies and frameworks.

Networks include, but are not limited to LAN, WAN, data center, cloud, and wireless networks that provide high availability, scalability, and security in both information technology (IT) and operation technology (OT) environments.

Develop and maintain comprehensive enterprise network architecture roadmap, including blueprints/drawings, security policies and frameworks, hardware, software, and security that span on-premises, cloud, and hybrid environments.

Drive the development and implementation of network security policies and framework, and enforce robust network security measures, including firewalls, VPNs, intrusion detection/prevention systems, and network segmentation.

Lead and direct the implementation of network architecture initiatives, solutions, and proof-of-concept projects while collaborating with multi-disciplinary teams, affiliates, and partners to support existing and future solutions.

Maintain compliance with corporate network infrastructure policies and procedures, and remain knowledgeable of new technologies, threats, regulations, standards, and best practices applicable to IT and OT environments.

Develop and maintain detailed network documentation, including diagrams, configuration standards, and ensure all network solutions adhere to defined corporate policies and governance models.

Leads governance processes to ensure network designs meet enterprise architecture standards.

Identify and recommend improvements in processes, procedures, technologies, network expansion, hardware, software and other network improvements and innovations.

Support the establishment and implementation of network testing benchmarks, cybersecurity internal controls, and monitoring strategies.

Serves as an escalation point for complex technical problems, participates in on-call rotations to resolve emergent network issues in critical environments, and develop and conduct training programs.

Provide architectural oversight during vendor evaluations and technology selection.

Oversee network-related risk assessments and lead implementation of mitigation strategies.

Contribute to disaster recovery and business continuity planning from a network design perspective.

Perform other duties as applicable to the position or as assigned.

Performs NERC Compliance Program roles.

Soft Competencies/Skills

Strong analytical and problem-solving abilities

Effective written and verbal communication

Strategic thinking and innovation

Strong project planning, coordination, and collaboration skills

Stakeholder engagement and influencing skill

Ability to mentor junior cybersecurity analysts and OT network engineers

Leadership in cross-functional teams and matrixed environments

Adaptability to evolving regulatory landscapes and emerging threat vectors

Skills: cloud,network design,security,design,architecture