Network Architect

Matlen Silver; Jersey City (NJ); On-site; USD 140,000 - 200,000; Full time

Job summary

Matlen Silver in Jersey City, NJ seeks a Senior Network Architect to design and implement secure, highly available enterprise DMZ/perimeter networks and cloud networking across on‑prem and public clouds.

You will work with network, security, cloud, infrastructure, and application teams to craft scalable connectivity patterns, reference designs, and architecture documentation while ensuring HA, DR, and secure external access.

Qualifications

• 8+ years of enterprise network engineering/architecture experience.
• Hands-on DMZ/perimeter network architecture experience.
• Experience designing internet-facing and externally accessible networks.
• Knowledge of segmentation, routing, NAT, VPN, DNS, load balancing, and traffic flows.
• Experience with enterprise firewalls (Palo Alto, Cisco Firepower/FTD, Fortinet or equivalent).
• Hybrid connectivity between data centers/on-prem and public cloud.
• Knowledge of AWS, Azure, or GCP.
• Cloud networking concepts: VPC/VNet, subnets, routing, peering, private connectivity, cloud firewalls.
• DesignsHigher-Level and Low-Level designs, network diagrams, and architecture docs.
• Strong HA, resiliency, DR, and secure network design; strong cross-team communication.

Responsibilities

• Design and evolve enterprise DMZ and perimeter network architecture.
• Develop secure connectivity patterns between on-premises, DMZ, and public cloud.
• Design network segmentation and traffic flows across zones.
• Support cloud adoption with secure public cloud connectivity.
• Develop architecture standards, reference designs, HLDs/LLDs, diagrams, and implementation strategies.
• Partner with security teams on firewall, WAF, IDS/IPS, DDoS protection, and traffic inspection.
• Evaluate existing network architectures and recommend improvements for scalability, resiliency, security, and performance.

Skills

DMZ/perimeter network

Enterprise network architecture

Cloud networking

Network segmentation

Firewall design

Hybrid cloud connectivity

HA/DR design

Cross‑functional collaboration

Tools

Arista EOS

CloudVision

EVPN-VXLAN

Terraform

Ansible

F5 BIG-IP

Job description

We are looking for a Senior Network Architect with strong experience designing and architecting enterprise DMZ/perimeter networks and hands‑on knowledge of public cloud networking. The ideal candidate will have deep experience with DMZ architecture, network segmentation, firewalls, routing, and secure external connectivity, along with experience designing or supporting cloud network environments in AWS, Azure, or GCP.

This role will focus on designing secure, highly available network architectures across data center, Internet-facing, hybrid, and public cloud environments. The architect will work closely with network engineering, cybersecurity, cloud platform, infrastructure, and application teams to develop scalable connectivity and security patterns.

• Design and evolve enterprise DMZ and perimeter network architecture supporting Internet-facing applications, external partners, and business-critical services.
• Develop secure connectivity patterns between on-premises data centers, DMZ environments, and public cloud platforms.
• Design network segmentation and traffic flows between Internet, DMZ, application, and internal network zones.
• Support cloud adoption and migration initiatives requiring secure public cloud connectivity.
• Develop architecture standards, reference designs, HLDs/LLDs, network diagrams, and implementation strategies.
• Partner with security teams on firewall, WAF, IDS/IPS, DDoS protection, and traffic inspection architectures.
• Evaluate existing network architectures and recommend improvements for scalability, resiliency, security, and performance.

Must-Haves

• 8+ years of enterprise network engineering/architecture experience.
• Strong, hands‑on DMZ / perimeter network architecture experience.
• Experience designing secure Internet‑facing and externally accessible network environments.
• Strong understanding of network segmentation, routing, NAT, VPN, DNS, load balancing, and traffic flows.
• Strong experience with enterprise firewalls such as Palo Alto, Cisco Firepower/FTD, Fortinet, or equivalent.
• Experience designing hybrid network connectivity between data centers/on‑premises environments and public cloud.
• Strong knowledge of at least one major public cloud platform: AWS, Azure, or GCP.
• Cloud networking experience including concepts such as VPC/VNet, subnets, routing, peering, private connectivity, security controls, and cloud‑native firewalls.
• Experience developing High-Level Designs (HLDs), Low-Level Designs (LLDs), network diagrams, and architecture documentation.
• Strong understanding of high availability, resiliency, disaster recovery, and secure network design.
• Strong communication skills and ability to work with network, security, cloud, infrastructure, and application teams.

Nice-to-Haves

• Experience with AWS, Azure, and GCP.
• Experience with Arista EOS / CloudVision / EVPN‑VXLAN.
• Cisco ACI / data center fabric experience.
• F5 BIG-IP / LTM / GTM experience.
• Palo Alto or other next‑generation firewall architecture.
• Infrastructure as Code such as Terraform or Ansible.
• Python or network automation experience.
• Zero Trust architecture.
• Experience in highly regulated or financial‑services environments.
• Experience with third‑party and business‑partner connectivity.
• Experience developing enterprise network standards and architecture roadmaps.