Solution Architect - Network Transformation

Theron Solutions

Edison (NJ)

On-site

USD 120,000 - 150,000

Full time

14 days+

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

A technology solutions provider is looking for a skilled Solution Architect to spearhead network modernization efforts. This role involves designing end-to-end solutions for SD-WAN and SASE transitions across various environments. Candidates should have extensive networking experience and strong client engagement skills, with relevant certifications. This position is full-time, based in Edison, New Jersey.

Qualifications

Proven track record leading assessments and designs for SD-WAN/SASE.
Deep architecture expertise in two or more SD-WAN stacks.
Strong client-facing communication and storytelling skills.

Responsibilities

Lead solution delivery architecture for network modernization.
Design and document HLD/LLD for SD-WAN platforms.
Define multi-cloud networking patterns and hybrid connectivity.

Skills

12–18+ years in networking

Client-facing communication

Architectural expertise in SD-WAN

Cloud networking knowledge

Automation and IaC

Education

One or more vendor/industry certifications

Tools

Cisco Viptela

Ansible

Terraform

Zscaler

AWS

Azure

GCP

Job description

Solution Architect - Network Transformation

Job Description:

Lead solutioning and delivery architecture for large‑scale network modernization programs across WAN/LAN/WLAN and cloud networking. Own end‑to‑end designs for SD‑WAN to SASE/Zero‑Trust transitions, Network‑as‑a‑Service (NaaS) models, multi‑cloud connectivity patterns, and observability/automation, aligning to business outcomes, security, and experience (SLA/XLA).

Roles and Responsibilities

Own discovery, assessment and target‑state reference architectures for enterprise networks (WAN/LAN/WLAN, DC/Cloud, OT/edge).
Design and document HLD/LLD for SD‑WAN platforms and SASE/Zero‑Trust controls (SWG, CASB, ZTNA, FWaaS).
Define multi‑cloud networking patterns (AWS TGW/Transit, Azure vWAN/Route Server, GCP NCC) and hybrid connectivity (ExpressRoute/Direct Connect/Interconnect).
Shape LAN/WLAN modernization (intent‑based/SD‑Access, Wi‑Fi 6/6E/7) and campus segmentation with identity‑aware policies.
Lead PoCs and solution validation; create BOMs/BOQs, migration runbooks, fallback plans, test/UAT approaches and acceptance criteria.
Partner with OEMs and Telcos; evaluate NaaS constructs and commercials; contribute to make‑vs‑buy decisions.
Embed observability and AIOps; specify telemetry, synthetics, and experience metrics (e.g., XLA) and define SLOs/SLIs.
Industrialize network automation (Ansible/Terraform, pipelines, IaC/GitOps), golden configs and compliance guardrails.
Contribute to pursuits (RFI/RFP/Orals), solution narratives, effort/cost models and risk registers; ensure solution governance and sign‑offs.
Provide architecture oversight into delivery; guide transition, cutovers, hypercare and handover; coach architects/engineers.
Author reusable patterns/accelerators and knowledge assets for the practice; evangelize client frameworks and best practices.

Qualifications

Mandatory Skills Experience:

12–18+ years in networking with 6+ years as an architect delivering global programs (>200 sites or equivalent scale).
Proven track record leading assessments, roadmaps, designs and migrations for SD‑WAN/SASE and campus/DC modernization. Experience in multi‑vendor, multi‑supplier environments; comfortable with Guardian/Service Integration models.
Consulting orientation with strong client‑facing communication, storytelling and executive presentation skills.

Education & Certifications:

One or more vendor/industry certifications: CCNP/CCIE, JNCIP/JNCIE, PCNSE, Fortinet NSE 7/8, ZIA/ZCCP, AWS Advanced Networking Specialty, Microsoft Azure Network Engineer Associate, TOGAF/ITIL (preferred).

Technical Skills:

Deep architecture expertise in two or more SD‑WAN stacks (e.g., Cisco Viptela/Meraki, Aruba EdgeConnect, Versa, Fortinet, Palo Alto/Prisma, Juniper).
Hands‑on design of SASE components (SWG, CASB/DLP, ZTNA, FWaaS) with vendors such as Zscaler, Netskope, Palo Alto, Fortinet, Cisco, or Cloudflare.
Cloud networking across AWS/Azure/GCP (Transit/Hub‑and‑Spoke, vWAN, Route Server, TGW, NCC), DNS/DHCP/IPAM (e.g., Infoblox) and identity‑aware segmentation.
Campus & DC networking (EVPN/VXLAN, SDA/ACI or equivalent), Wireless (Wi‑Fi 6/6E/7), NAC/802.1X.
Automation and IaC (Ansible, Terraform, Git, CI/CD) and scripting (Python/Bash) to codify design, config and operational workflows.
Observability & Digital Experience Monitoring (e.g., ThousandEyes, AppNeta, Datadog, Dynatrace) and NPM/NPMD stacks; capacity and performance engineering.
Security fundamentals: Zero‑Trust architectures, micro/macro‑segmentation, certificate/PKI, encryption, BCP/DR for networks.
Understanding of OT/Industrial networks and Private 5G/LTE (nice‑to‑have) for shop‑floor and edge scenarios.

Desired Skills

Customer focus and ownership mindset; ability to balance value, risk and cost.
Collaborative leadership across architecture, engineering, security and operations.
Structured problem‑solving; crisp writing; ability to create compelling solution narratives.

Success Measures / KPIs

Solution quality and governance (architecture checkpoints passed, deployment exceptions).
Pursuit impact (win rate/shortlists, solution scoring, commercial hygiene).
Migration outcomes (cutover success rate, MTTR, performance uplift, XLA improvements).
Automation and standardization (golden configs/templates; % infra as code).

EOE:

Our client is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: We are committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at our client are based on business needs, job requirements, and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. We will not tolerate discrimination or harassment based on any of these characteristics

Seniority level