Senior Network Systems Architect

Ultragenyx Pharmaceutical Inc.; Novato (CA); Hybrid; USD 161,200 - 199,200; Full time

Benefits offered by this job

Generous vacation time

Long-term incentive and employee stock purchase plans

Fitness reimbursement

Job summary

A leading pharmaceutical company in California is seeking a seasoned Senior Network Systems Architect to lead the evolution of global hybrid network and systems infrastructure. The ideal candidate will have strong expertise in Cisco Meraki, Azure networking, and Cisco ASA. This role involves managing daily operations, architecting hybrid environments, and ensuring operational excellence. A Bachelor's degree in computer science or related fields is preferred, alongside 7+ years in network and systems architecture. Generous benefits and flexible working conditions are offered.

Qualifications

• 7+ years of experience in network and systems architecture.
• Strong experience with Cisco Meraki, Azure Firewall, and Cisco ASA.
• Solid understanding of core networking concepts like BGP and IPsec.

Responsibilities

• Manage and architect hybrid infrastructure environments.
• Develop scalable Meraki configurations.
• Provide understanding of routing protocols and Azure architectures.

Skills

Cisco Meraki

Azure Cloud networking

Cisco ASA

Python

Terraform

Ansible

Education

Bachelor’s degree in computer science, engineering, or related field

Tools

Wireshark

NetFlow

ThousandEyes

Azure Monitor

Job description

Position Summary

We are seeking a seasoned Senior Network Systems Architect to lead the evolution of our global hybrid network and systems infrastructure. This role requires a strong foundation in Cisco Meraki, Azure Cloud networking, and Cisco ASA. The ideal candidate will bring hands‑on expertise in designing, scaling, and supporting both on‑premises and cloud environments, while contributing to a secure, reliable, and high‑performing enterprise network.

Familiarity with automation tools such as Python, Terraform, and Ansible is preferred, but not mandatory. Experience working with Managed Service Providers (MSPs) and global telecom carriers to negotiate contracts and provision circuits is essential. This position combines architecture with day‑to‑day operational support, requiring a balance of strategic planning and practical execution.

Work Model

Flex: This role will typically require onsite work 2‑3 days each week or more depending on business needs. In many locations, the business will set certain days each week that Flex employees are required to be onsite.

Responsibilities

• Manage day‑to‑day operations, architect, deploy, and manage hybrid infrastructure environments using Cisco Meraki, Azure networking services, and Cisco ASA firewalls.
• Design and templatize scalable Meraki configurations and maintain consistent deployment practices across locations.
• Create and maintain hub‑and‑spoke network architectures across Azure regions, ensuring resiliency, segmentation, and traffic control.
• Provide a solid understanding of routing protocols, Azure routing, UDRs, NAT gateways, VPN/ExpressRoute gateways, and NVA‑based architectures with multi‑region failover support.
• Develop and maintain architectural documentation including high‑level designs, topology diagrams, and operational procedures.
• Support operational excellence by serving as an escalation point for L1/L2/L3 network and systems issues and ensuring timely resolution.
• Perform deep packet inspection and network troubleshooting using tools like Wireshark and NetFlow.
• Participate in the planning, procurement, and provisioning of global circuits, including direct engagement and negotiation with carriers and service providers.
• Collaborate with MSPs and internal teams to manage operations, incidents, capacity planning, and global deployments.
• Utilize tools like ThousandEyes, Azure Monitor, and log analytics to ensure observability and proactive incident response.
• Ensure strong cross‑functional collaboration with IT security, infrastructure, and compliance teams.
• Support growth and scaling initiatives by addressing evolving infrastructure needs, integrating new locations, and expanding global connectivity.
• Contribute to the recruitment, mentorship, and development of junior and mid‑level engineers.

Requirements

• 7+ years of experience in network and systems architecture, with a blend of cloud and on‑premises responsibilities.
• Strong hands‑on experience with Cisco Meraki, Cisco ASA, and Azure Firewall, as well as Azure network design and deployment.
• Solid understanding of core networking concepts such as BGP, IPsec, and high‑availability configurations.
• Demonstrated experience managing or collaborating with MSPs and supporting global operations.
• Experience negotiating with and provisioning circuits through global telecom carriers.
• Strong analytical and troubleshooting skills, especially in production environments.
• Comfortable handling operational demands, including incident response, change control, capacity planning, and documentation.
• Excellent communication and interpersonal skills, with experience engaging both technical teams and senior stakeholders.
• Ability to manage shifting priorities and infrastructure needs as the company grows and scales globally.

Preferred Qualifications

• Bachelor’s degree in computer science, engineering, or a related field, or equivalent work experience.
• Prior experience working in pharmaceutical or regulated industries.
• Working knowledge of Windows Server, Active Directory, DNS, DHCP, and group policy configurations and core systems operations.
• Experience with zero‑trust network design, hybrid cloud security models, and compliance frameworks.
• Certifications such as CCNP, Azure Network Engineer Associate, or equivalent.

Pay Range

$161,200 - $199,200 USD

Benefits

• Generous vacation time and public holidays observed by the company.
• Long‑term incentive and employee stock purchase plans or equivalent offerings.
• Fitness reimbursement.
• Benefits vary by region and country.

Equal Opportunity Employer

Ultragenyx Pharmaceutical is an equal opportunity employer and prohibits unlawful discrimination based on race, color, religion, gender, sexual orientation, gender identity/expression, national origin/ancestry, age, disability, marital and veteran status, and any other status or classification protected by applicable federal, state, and/or local laws. Reasonable accommodation will be provided for all protected statuses or classifications protected by applicable law, including individuals with disabilities, disabled veterans, for pregnancy, childbirth, and related medical conditions, and based on sincerely held religious beliefs. Applicants can request an accommodation prior to accepting a job offer. If you require reasonable accommodation in completing this application, or in any part of the recruitment process, you may contact Talent Acquisition by emailing us at [e-mail].

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.