Senior Network Architect: ACI/SDA & Security (Remote)

WebHosting; United States; Hybrid; USD 130,000 - 160,000; Full time

Job summary

Webhosting is seeking a senior network engineer to design, architect, implement, and support a complex enterprise network spanning multi-datacenter environments. The role involves leading troubleshooting, mentoring peers, and coordinating with security teams to ensure robust, scalable solutions.

You will design and manage Cisco ACI and SDA fabrics, BGP/OSPF routing, Nexus-based switching, and firewall configurations, while driving automation and IaC pipelines to enforce policy deployment and

Job description

Job Description

Responsible for the design, architecture, engineering, implementation, and support of the Enterprise and multi datacenter network environment, spanning routing, switching, campus fabric, and network security. Acts as a senior technical resource for troubleshooting and architecting complex network solutions and may serve as a project lead or mentor for other engineers on the team.

Location:Remote – Work from Home. Pacific Northwest-based preferred but not required. Periodic travel to the Seattle, WA metropolitan area required, up to 10%.

Key Responsibilities

Designs and architects scalable, resilient network solutions across routing, switching, fabric, and security domains

Leads complex troubleshooting efforts, including routing protocol issues, fabric/switching connectivity, and firewall policy conflicts

Architects and maintains Cisco ACI fabric environments, including tenant design, endpoint groups, contracts, and fabric integration

Architects and maintains Cisco SD-Access (SDA) fabric environments, including underlay/overlay design, fabric edge/border/control-plane nodes, and DNA Center-based policy and segmentation

Designs, configures, and troubleshoots BGP and OSPF routing environments, including route redistribution, policy control, and multi-site architectures

Architects highly available switching infrastructure across Nexus, ACI, and SD-Access fabric environments, including VXLAN/EVPN-based segmentation and fabric-based redundancy to eliminate single points of failure

Configures, maintains, and troubleshoots Palo Alto Networks firewalls, including security policy design, NAT, VPN, and threat prevention

Designs and manages network access control (NAC) policies and device compliance using Forescout or Aruba Clearpass.

Serves as an escalation point for high-level, service-impacting network issues

Identifies, reviews, and recommends security postures to peers and appropriate security teams

Researches, evaluates, and recommends hardware, software, and vendor solutions based on cost, performance, and business need

Leads implementation planning prior to installation of network hardware such as routers, firewalls, wireless controllers, and switches

Develops project plans and task lists for network initiatives, and participates in peer design reviews

Partners with vendors and third-party providers to evaluate and integrate new equipment and services

Creates and maintains technical documentation, network diagrams, and standard operating procedures

Mentors and provides technical guidance to less experienced engineers

Participates in on-call support rotation per team design

Architects and implements automation and infrastructure-as-code pipelines (Python, Ansible) to drive configuration consistency, enforce compliance, and accelerate policy deployment across the enterprise network and security fabric

Certifications

CCNA or higher required (Routing and Switching, Enterprise, or Data Center track); CCNP or CCIE preferred