Senior Network Architect – Hybrid, Enterprise & Data Center

HistoSonics, Inc.; Minneapolis (MN); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with company match

Paid time off

Job summary

HistoSonics in Plymouth, MN is seeking a Principal Network Engineer to own, design, and operate the enterprise network across all sites. This hybrid role focuses on routing, switching, wireless, data center networking, cloud connectivity, and zero-trust security with a strong emphasis on reliability and governance.

You will lead network architecture, implement SD-WAN, firewall policy lifecycles, DNS security, and secure remote access, while mentoring junior staff and collaborating with AI/R&D

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field.
• 10+ years in network engineering, including experience above senior level.
• Intermediate to expert experience with Cisco platforms, including Catalyst and Meraki cloud-managed switching, wireless, and security appliances, with advanced working knowledge of BGP, OSPF, VLANs, spanning tree, and link aggregation.
• Intermediate to expert experience administering Palo Alto Networks and Meraki firewalls, covering policy design, segmentation, threat prevention, and rule lifecycle management.
• Demonstrated experience designing networks for larger multi-building or multi-floor campus facilities, including wireless design and validation and structured cabling standards, and with data center design, including high-availability topologies, redundancy, and capacity planning.
• Demonstrated experience designing corporate location interconnectivity, including wide area network and SD-WAN topologies, carrier and circuit management, failover design, and direct connectivity to cloud environments such as AWS Direct Connect or Azure ExpressRoute.
• Demonstrated experience operating mission-critical or product production environments, including service level objectives, change control, and incident response.
• Experience with network monitoring and observability tooling, network authentication and access control, and making changes within an environment compliant with ISO 27001 and SOC 2 standards.

Responsibilities

• Design, deploy, administer, and maintain the enterprise network across all sites, including routing, switching, wireless, network access control, and IP address management.
• Own corporate site interconnectivity, including wide area network and SD-WAN topology, carrier and circuit selection, redundancy and failover design, and inter-site capacity planning.
• Design and administer data center and server room networking, including core and top-of-rack switching, high-availability topologies, and out-of-band management, and maintain dedicated connectivity to cloud platforms, including private interconnects and virtual network routing, in coordination with the System Administration function.
• Own the design, administration, and rule lifecycle of enterprise firewalls, including policy standards, change review, periodic rule base review, and segmentation between corporate, laboratory, manufacturing, guest, and product environments.
• Design and administer DNS security, web and content filtering, intrusion prevention, and remote access, including site-to-site and client virtual private networking following zero trust principles.
• Develop forward-looking network security plans and roadmaps supporting the organization’s security maturity objectives, in partnership with Information Security and under the direction of the Senior Director, Information Systems and Security.
• Plan, design, and execute network buildouts for new and expanded facilities, including low-voltage design, wireless surveys and validation, equipment specification, vendor coordination, and cutover planning.
• Own the network and supporting infrastructure for physical security systems, including access control and video surveillance, partnering with Facilities and Security on design and operational support.
• Maintain accurate network documentation, including topology diagrams, addressing schemes, circuit and vendor records, and as-built documentation for each facility.
• Define and implement network monitoring, alerting, flow analysis, and performance reporting, and contribute network telemetry and dashboards to centralized reporting.
• Define service level objectives, alert thresholds, and escalation paths for network services supporting mission-critical systems.
• Serve as a senior technical responder for major network incidents, conduct root cause analysis, drive corrective and preventive actions, and participate in an on-call rotation for after-hours support.
• Author and maintain organizational network standards for architecture, addressing, configuration baselines, firmware lifecycle, and change control, and drive adoption across sites.
• Identify and automate manual network operational processes, including configuration backup, compliance validation, and reporting, using Python, PowerShell, or comparable languages.
• Serve as control owner for assigned IT controls, provide audit evidence, ensure network configurations and patching adhere to IT policies and applicable regulatory requirements, and support validation of network infrastructure under the HistoSonics Quality Management System.
• Serve as the final internal escalation point for complex network issues and provide technical mentorship and design review to System Administrators and IT Support Specialists.
• Serve as the primary Information Systems network resource to the AI and R&D Infrastructure team, providing architecture guidance, design review, and escalation support.
• Represent network infrastructure in architecture reviews, threat modeling, and change control, and advise Security, Data Privacy, Quality, and Regulatory stakeholders.
• Escalate cross-organizational governance conflicts, scope disputes, and resourcing trade-offs to the Senior Director, Information Systems and Security, and evaluate, recommend, and implement network hardware, circuits, and SaaS solutions to address business needs.

Skills

Cisco networking

Network design

Troubleshooting

Cloud connectivity

Incident response

Education

Bachelor’s degree in Information Technology, Computer Science, or related field

Tools

Cisco Catalyst

Meraki

Palo Alto Networks

Job description

HistoSonics in Plymouth, MN is seeking a Principal Network Engineer to own, design, and operate the enterprise network across all sites. This hybrid role focuses on routing, switching, wireless, data center networking, cloud connectivity, and zero-trust security with a strong emphasis on reliability and governance.

You will lead network architecture, implement SD-WAN, firewall policy lifecycles, DNS security, and secure remote access, while mentoring junior staff and collaborating with AI/R&D