Senior Network Architect

Trinity Industries, Inc.; Dallas (TX); On-site; USD 140,000 - 200,000; Full time

Job summary

Trinity Industries in Dallas, TX seeks a Sr. Network Architect to lead enterprise networking across campus, data center, and cloud environments. You will define architecture, security, and automation strategies while mentoring engineers and aligning with Trinity’s long-term goals.

The role emphasizes Zero Trust, SD-WAN, and cloud-native networking with strong collaboration with security and application teams. Excellent communication to executive stakeholders is essential.

Qualifications

• Bachelor’s degree or higher in a related field.
• 10+ years of progressive network engineering with senior architect experience.
• Active industry certification: CCNP (Enterprise or Security), Fortinet NSE 7/8, or equivalents; cloud networking certs preferred.
• Deep expertise in routing and switching: BGP, OSPF, EIGRP, MPLS, VXLAN/EVPN, QoS.
• Hands-on SD-WAN platforms and multi-cloud connectivity experience.
• Strong written and verbal communication for executive audiences.

Responsibilities

• Serve as the principal technical expert for enterprise networking across Trinity IT.
• Design and lead scalable network architectures across campus, data center, WAN, and multi-cloud.
• Lead evaluation and adoption of Zero Trust Network Access (ZTNA), micro-segmentation, identity-aware networking.
• Own network security architecture: NGFW, IDS/IPS, NAC, DNS security, DDoS strategies.
• Architect and govern SD-WAN strategy with cloud integration.
• Drive network automation and IaC practices using Ansible, Terraform, Python, CI/CD.
• Establish comprehensive network observability and telemetry for proactive ops.
• Develop disaster recovery, business continuity, and incident response plans.

Skills

Network architecture design

Zero Trust networking

SD-WAN

Cloud networking

Network security architecture

IaC (Ansible, Terraform, Python)

Routing and switching (BGP, OSPF, EIGP

Executive communication

Vendor and carrier management

Automation and scripting

Team mentoring

Education

Bachelor’s degree in Computer Science, Information Technology, or a related field

Master’s degree or equivalent professional experience preferred

Tools

Cisco DNA Center/Catalyst Center

FortiManager

SolarWinds

ThousandEyes

Grafana

Citrix ADC/NetScaler

F5

Azure ExpressRoute

AWS Direct Connect

Job description

Trinity Industries is searching for a talented team player to fill the open position of Sr. Network Architect in our Dallas, Texas headquarters office.

The Senior Network Architect will serve as the principal technical authority for Trinity’s enterprise network infrastructure. This role provides strategic leadership across campus, data center, cloud, and wide-area network domains; drives the adoption of modern network architectures including Zero Trust, SD-WAN, and cloud-native networking; and partners with security, cloud, and application teams to deliver resilient, scalable, and secure connectivity. The Senior Network Architect will mentor engineers, develop technology roadmaps, and translate business requirements into actionable network designs that align with Trinity’s long-term objectives.

What you’ll do:

• Serve as the principal technical expert for all enterprise networking across Trinity Industries IT, including services delivered directly by Trinity and those provided by managed service and carrier partners
• Design and lead the implementation of scalable, highly available network architectures across campus, data center, WAN, and multi-cloud environments
• Lead the evaluation and adoption of Zero Trust Network Access (ZTNA) principles, micro-segmentation, and identity-aware networking to advance Trinity’s security posture
• Own network security architecture, including next-generation firewalls (Palo Alto/Firepower/Fortigate), IDS/IPS, network access control (NAC), DNS security, and DDoS mitigation strategies
• Architect and govern SD-WAN strategy, including underlay/overlay design, traffic engineering, and integration with cloud on-ramps (Azure Virtual WAN, AWS Transit Gateway)
• Drive network automation and infrastructure-as-code (IaC) practices using tools such as Ansible, Terraform, Python, and CI/CD pipelines to reduce manual operations and increase deployment velocity
• Establish and maintain comprehensive network observability through monitoring, telemetry (NetFlow/sFlow/streaming telemetry), and AIOps tooling to enable proactive capacity planning and rapid incident response
• Develop and maintain network-centric disaster recovery, business continuity, and incident response plans; conduct regular testing to validate RTO/RPO objectives
• Partner with IT Security and Compliance teams to ensure network architecture meets regulatory and audit requirements (SOX, NIST CSF, CIS Controls)
• Build and maintain technology roadmaps, architecture standards, and design documentation; present recommendations and investment cases to IT leadership and executive stakeholders
• Mentor and guide a team of network engineers; foster a culture of continuous learning, operational excellence, and engineering rigor

What You’ll Need:

• Bachelor’s degree in Computer Science, Information Technology, or a related field required; Master’s degree or equivalent professional experience preferred
• 10+ years of progressive network engineering experience, with at least 3 years in a senior architect or technical lead capacity
• Active industry certification required: CCNP (Enterprise or Security), Fortinet NSE 7/8, or equivalent; cloud networking certifications (Azure Network Engineer Associate, AWS Advanced Networking) strongly preferred
• Deep expertise in routing and switching: BGP, OSPF, EIGRP, MPLS, VXLAN/EVPN, STP/RSTP, 802.1Q, and QoS design
• Hands-on experience with SD-WAN platforms (Cisco, Fortinet, or Palo Alto) including policy-based routing, application-aware path selection, and WAN optimization
• Demonstrated experience architecting hybrid and multi-cloud network connectivity, including Azure ExpressRoute, Azure Virtual WAN, VPN Gateways, AWS Direct Connect, and cloud-native network security services
• Solid grounding in network security architecture: NGFW, IDS/IPS, NAC (Cisco ISE or FortiNAC), network segmentation, Zero Trust principles, and PKI/certificate management
• Proficiency in network automation and scripting: Python, Ansible, Terraform, REST APIs, NETCONF/YANG, and Git-based version control for infrastructure-as-code workflows
• Experience with enterprise design, lifecycle management and relevant vendor tools (Cisco DNA Center/Catalyst Center, FortiManager, or equivalent)
• Experience with enterprise wireless design and lifecycle management (WLC 9800, or equivalent) including Wi-Fi 6/6E deployment and RF planning
• Familiarity with network observability platforms (SolarWinds, ThousandEyes, Cisco AppDynamics, Grafana, or similar) and experience operationalizing streaming telemetry and AIOps for proactive operations
• Experience with load balancing and application delivery (Citrix ADC/NetScaler, F5, or cloud-native equivalents) and a working knowledge of TLS/SSL inspection and application layer networking
• Proven ability to perform network security assessments and audits; experience remediating findings against regulatory frameworks such as NIST CSF, CIS Controls, or SOX IT General Controls
• Strong vendor and carrier management skills, with experience negotiating and managing WAN/MPLS/internet circuit contracts and SLAs
• Excellent written and verbal communication skills; proven ability to translate complex technical architecture into clear executive-level presentations and business cases