Senior Architect

Battle Tested; Jersey City (NJ); On-site; USD 150,000 - 210,000; Full time

Job summary

Battle Tested is seeking a Senior Network Security Architect to design secure, large-scale network solutions across enterprise, cloud, remote access, partner connectivity, and internet-facing environments. You will collaborate with business, cybersecurity, engineering, and operations teams to translate requirements into practical, scalable designs.

You will develop high-level and detailed network designs, review proposals for security standards, and support complex infrastructure projects from

Qualifications

• 10+ years in enterprise networking or infrastructure architecture.
• Experience designing secure networks for large organizations.
• Hands-on with DMZ, VPNs, segmentation, and security-first designs.
• Familiarity with cloud connectivity and major cloud platforms.
• Knowledge of routing, switching, and network monitoring.

Responsibilities

• Design secure network solutions for enterprise, cloud, and remote access.
• Create DMZ, VPN, SD-WAN, and external access architectures.
• Collaborate with cybersecurity, engineering, and operations teams.
• Review designs for security, performance, and scalability.
• Guide projects from concept to delivery and provide escalation support.
• Contribute to standards, templates, and roadmaps.
• Evaluate technology options and recommend platforms.
• Support design reviews to ensure maintainability and security.

Skills

Enterprise networking

DMZ architecture

Cloud networking

Firewall & VPN design

Network security architecture

Tools

Cisco

Arista

Cisco Nexus

Fortinet

ASA/Firepower

Job description

We are seeking an experienced Senior Network Security Architect to help design and guide secure, large-scale network solutions across enterprise, cloud, remote access, partner connectivity, and internet-facing environments.

This role is ideal for someone with deep experience in enterprise networking, DMZ architecture, cloud connectivity, network segmentation, firewalls, routing, switching, VPNs, and security-focused infrastructure design. This person will work closely with business, cybersecurity, engineering, and operations teams to create secure, scalable network designs that support critical business needs.

The Senior Network Security Architect will develop high-level and detailed network designs, review proposed solutions for security and architecture standards, help teams resolve design challenges, and support the delivery of complex infrastructure projects.

What You Will Do

• Design secure network solutions for enterprise, cloud, remote access, vendor, customer, and business-to-business connectivity.
• Create architecture designs for DMZ, VPN, SD-WAN, cloud, hosting, and secure external access environments.
• Partner with cybersecurity, engineering, operations, and business teams to understand requirements and translate them into practical technical designs.
• Review network design requests to ensure they meet security, performance, reliability, and scalability standards.
• Guide project teams through technical challenges and help move designs from concept to delivery.
• Serve as a technical escalation point for complex network architecture and security-related issues.
• Support proof-of-concept and lab testing for new or complex network solutions.
• Help define architecture standards, templates, best practices, and future-state roadmaps.
• Evaluate technology options and help recommend the right platforms, tools, and approaches.
• Support design reviews to ensure solutions are secure, maintainable, scalable, and aligned with company standards.

What We Are Looking For

• 10 or more years of experience in enterprise technology, network engineering, network architecture, or infrastructure architecture.
• Strong background designing secure network environments for large, complex organizations.
• Experience with cloud networking and integrating enterprise networks with platforms such as AWS, Microsoft Azure, Google Cloud Platform, or IBM Cloud.
• Strong understanding of network security, DMZ design, traffic segmentation, and secure connectivity.
• Hands-on knowledge of routing, switching, firewalls, VPNs, DNS, HTTP/S, IPv4/IPv6, and network monitoring.
• Experience with platforms and technologies such as Cisco, Arista, Cisco Nexus, Cisco ASA/Firepower, Fortinet, Catalyst, ASR, ISR, and Nexus.
• Strong understanding of protocols and concepts such as TCP/IP, OSPF, BGP, VLANs, IPsec, PKI, QoS, multicast, MPLS, port-channeling, VRRP, FHRP, VPC, VDC, and software-defined networking.
• Experience supporting DDoS protection and mitigation using tools such as Arbor, Akamai/Prolexic, F5 Silverline, or similar platforms.
• Experience working with large-scale DMZ, ISP, hosting, remote access, and partner connectivity environments.
• Familiarity with authentication and identity tools such as Active Directory, PingFederate, or similar solutions.
• Ability to use scripting or automation to improve network processes and solution delivery.

Preferred Experience

• Experience connecting enterprise environments to AWS, Azure, Google Cloud Platform, or other public cloud providers.
• Knowledge of cloud connectivity services such as Direct Connect, ExpressRoute, Cloud Interconnect, and site-to-site VPNs.
• Experience with network testing tools such as Quali CloudShell, Viavi TeraVM, or similar platforms.
• General knowledge of security technologies, including firewalls, intrusion detection, and threat protection.
• Exposure to Arista EOS, Cisco IOS-XR, IPv6 testing, and cloud-based network automation.
• Experience with Python or infrastructure automation tools such as Terraform, Ansible, NetConf, YANG, or Arista CloudVision.