Network Architect

Weather Group; Atlanta (GA); Presencial; USD 140.000 - 190.000; Jornada completa

Descripción de la vacante

Allen Media Group in Atlanta seeks an experienced Network Architect to design, implement, and secure our LAN/WAN, data center, and cloud connectivity. You will own architecture decisions, write formal designs, and mentor engineers in a lean, high-availability environment.

The role emphasizes Palo Alto firewall design, Panorama management, and edge security, with hands-on responsibilities during maintenance windows.

Formación

• 10+ years in enterprise network engineering, with 3+ years in an architect or principal-level role.
• Expert-level routing and switching: BGP, OSPF, VXLAN/EVPN, multicast, QoS, high availability.
• Deep hands-on experience with Palo Alto (PAN-OS, Panorama) and Cisco platforms (Catalyst, Nexus, ACI, Meraki).
• Demonstrated experience designing and operating networks in a 24x7 environment where downtime is externally visible.
• Strong troubleshooting discipline: packet capture, flow analysis, and structured fault isolation under pressure.
• Track record of leading technical work through people who do not report to you.
• Bachelor's degree or equivalent practical experience.
• CCIE/CCNP, Palo Alto certification, or equivalent depth demonstrated by work history.

Responsabilidades

• Plan, design, and own the LAN, WAN, and hybrid onsite/cloud architecture.
• Produce architect-grade documentation: requirements, constraints, alternatives, failure modes, migration path.
• Maintain IP/VLAN schemas and configuration standards.
• Set routing and switching standards — analyze traffic patterns, monitor performance, address bottlenecks.
• Design for resilience: no single points of failure and tested failure paths.
• Own capacity planning and technology lifecycle across the network; data-driven buy/refresh cases.
• Evaluate platforms and vendors on technical merit with defensible recommendations.
• Prepare project plans, budgets, and resources for infrastructure deployments.
• Technical peer to partner with other teams for operational or engineering needs.
• Own Palo Alto firewall architecture: PAN-OS, Panorama, App-ID/User-ID, decryption strategy, HA, URL filtering.
• Own remote access and edge architecture — GlobalProtect, ZTNA/SASE, internet edge, cloud connectivity.
• Design segmentation and east-west controls, including microsegmentation for data center.
• Ensure logging and flow visibility reach monitoring and security tools.
• Keep abreast of new URL categories, technologies, and vulnerabilities; recommend upgrades.
• Own the operational health of the network day to day: monitoring, alerting, incident queue, change quality.
• Set engineering standards; review significant changes before implementation.
• Own change planning and maintenance windows in a 24x7 environment; pre-checks, rollback, post-change validation.
• Serve as top escalation point for network incidents and lead technical bridge calls.
• Own postmortems and drive corrective actions to closure.
• Mentor engineers and grow the bench; coordinate with other technologists on shared work.
• Act as the technical delegate in vendor, carrier, and architecture review sessions.
• Write clearly; designs, standards, change records, and incident narratives are deliverables.

Conocimientos

BGP

OSPF

VXLAN/EVPN

multicast

QoS

High availability

Educación

Bachelor's degree or equivalent

Herramientas

Palo Alto PAN-OS

Panorama

Cisco Catalyst

Cisco Nexus

Meraki

Descripción del empleo

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Network Architect

IT Operations Full Time Atlanta, GA, US

Network Architect

Position Summary

We are looking for an experienced Network Architect to design, optimize, and oversee our network and firewall infrastructure. This position will be responsible for ensuring our data, cloud, and security systems are scalable, reliable, and secure.

This is the deepest technical seat on the network team. It owns how the network is designed: corporate, data center, cloud, and the media networks that carry live content, and it leads the team that runs it. The lead responsibility is real but informal. There are no direct reports. This role leads through design authority, technical credibility, and follow-through. On a lean team it is also a working role: the architect writes the configs, joins the maintenance window, and handles escalation for any outages or issues, and mentors other engineers.

Depth is the point of this position. It is not a role for a generalist who reviews vendor diagrams. The successful candidate can defend a design decision under questioning, read a packet capture, and troubleshoot a problem at all hours. This role owns the architecture being right and the network staying up. This position will be the SME for all network and security infrastructure.

Key Responsibilities

Plan, design, and own the LAN,WAN,and hybrid onsite/cloud architecture. Provide a roadmap to keep architecture up to date and to encompass new technologies.

Produce architect-grade documentation: designs with stated requirements, constraints, alternatives considered, failure modes, and a migration path. Not diagrams alone.

Maintain IP/Vlan schemas and configuration standards.

Set routing and switching standards — analyze traffic patterns, monitor network performance, and address any latency, network bottlenecks, or bandwidth issues.

Design for measurable resilience: no single points of failure on network paths, and a documented, tested behavior for every failure path.

Own capacity planning and technology lifecycle across the network; make the buy/refresh case with data.

Evaluate platforms and vendors on technical merit and give management a defensible recommendation, including the option not to buy.

Prepare project plans, budget estimates, and resources needed for any infrastructure deployments.

Technical peer to partner with other teams for operational or engineering needs.

Network Security Architecture

Own Palo Alto firewall architecture: PAN-OS platform design, Panorama management, App-ID/User-ID policy model, decryption strategy, HA design, URL filtering, AI security, and geo-location firewall rules.

Own remote access and edge architecture — GlobalProtect, ZTNA/SASE direction, internet edge, and cloud connectivity.

Design segmentation and east-west controls, including microsegmentation strategy for the data center.

Ensure logging and flow visibility reach network monitoring and security tools.

Keep abreast of new URL categories, technologies, and vulnerabilities. Make recommendations where needed for upgrades, changes, new licenses, or new technologies.

Own the operational health of the network day to day: monitoring, alerting, incident queue, change quality, code upgrades, policies, and procedures.

Set the engineering standards the team builds to; review every significant change before implementation.

Own change planning and maintenance windows in a 24x7 environment — pre-checks, rollback, post-change validation, and coordination with on-air schedules.

Serve as the top escalation point for network incidents and lead technical bridge calls.

Own the postmortem and drive corrective actions to closure.

Mentor engineers and grow the bench so the team is not single-threaded.

Coordinate with other business-unit technologists on shared work: agree on outcomes, publish expectations, follow up until closed.

Act as the technical delegate in vendor, carrier, and architecture review sessions.

Communication

Write clearly. Designs, standards, change records, and incident narratives are deliverables of this role, held to the same standard as the engineering.

Present and defend architecture to technical peers, and translate the same decision into cost, risk, and on-air impact for executives.

Communicate during incidents on a defined cadence: what is known, what is not, what is being done, when the next update comes.

Give management an accurate picture without prompting — what is on track, what is slipping, what needs a decision.

Ownership & Accountability

This is stated explicitly because it is the primary filter for this role. The successful candidate:

Owns the design and its consequences. A failure caused by an architecture decision is an architecture problem, not an operations problem.

Verifies rather than assume — redundancy is proven by testing the failover, not by reading the diagram.

Surfaces bad news early, with a recommendation attached.

Does not defer to a vendor SE for a decision this role should be making.

Takes responsibility for the team's misses when leading the work, and gives credit for the wins.

Do not let something fall because it sat outside the job description.

Required Qualifications

10+ years in enterprise network engineering, with 3+ years in an architect or principal-level role.

Expert-level routing and switching: BGP, OSPF, VXLAN/EVPN, multicast, QoS, high availability. Design-level, not just configuration level.

Deep hands-on experience with Palo Alto (PAN-OS, Panorama) and Cisco platforms (Catalyst, Nexus, ACI, Meraki switches and routers).

Demonstrated experience designing and operating networks in a 24x7 environment where downtime is externally visible.

Strong troubleshooting discipline: packet capture, flow analysis, and structured fault isolation under pressure.

Track record of leading technical work through people who do not report to you.

Bachelor's degree or equivalent practical experience.

Preferred

CCIE, CCNP, Palo Alto certification, or equivalent depth demonstrated by work history.

Familiarity with multicast including protocol implementation and configuration

Experience with a data center or facility build, migration, or consolidation.

Familiarity with network monitoring and network observability platforms

SD-WAN and cloud connectivity design experience (Direct Connect / GCP Interconnect).

Automation or scripting for network config and validation (Python or equivalent).

AI experience to accelerate troubleshooting and problem resolution, automate repetitive tasks, and increase operational efficiency

Allen Media Group is an equal opportunity employer and is committed to creating an inclusive environment for all employees. We do not discriminate on the basis of race, color, national origin, gender, gender identity, sexual orientation, age, disability, religion, veteran status, or any other protected characteristic. All qualified applicants will receive consideration for employment without regard to these characteristics. We are dedicated to providing a workplace free from harassment and discrimination.