Sr. Network Architect

Trinity Structural Towers; Dallas (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Trinity Industries in Dallas, TX is seeking a Sr. Network Architect to lead the enterprise network strategy across campus, data center, and cloud environments.

You will mentor engineers, design scalable architectures, and drive modern networking practices including Zero Trust, SD-WAN, and cloud integrations to ensure secure, reliable connectivity.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related field; Master’s preferred.
• 10+ years progressive network engineering experience; 3+ years in senior architect/lead role.
• Active industry certs: CCNP Enterprise/Security, Fortinet NSE 7/8; cloud networking certs preferred.

Responsibilities

• Serve as principal technical authority for Trinity’s enterprise network infrastructure.
• Design scalable, highly available network architectures across campus, data center, WAN, and multi-cloud environments.
• Lead adoption of Zero Trust, micro-segmentation, and identity-aware networking to improve security posture.
• Own network security architecture including NGFW, IDS/IPS, NAC, DNS security, and DDoS mitigation.
• Govern SD-WAN strategy with underlay/overlay design and cloud integration (Azure, AWS).
• Drive IaC and automation with Ansible, Terraform, Python to reduce manual ops and speed deployments.
• Maintain observability with monitoring, telemetry, and AIOps for proactive operations.
• Develop disaster recovery, business continuity, and incident response plans; test RTO/RPO.

Skills

Networking architecture

Zero Trust

SD-WAN

Network security

Infrastructure as code

Cloud networking

Python

Education

Bachelor’s degree in Computer Science / IT

10+ years network engineering

Tools

Cisco DNA Center

FortiManager

Palo Alto Firewalls

Azure ExpressRoute

AWS Direct Connect

Job description

Delivering Goods For The Good Of All™ - TrinityRail

While _TrinityRail_ has built one of the broadest and deepest railcar platforms in the world, it’s what’s inside our cars that counts. We are proud to manufacture, maintain, and manage the railcars that deliver the indispensable goods that keep our lives, and our economy, rolling. “Delivering Goods For The Good Of All” is why we proudly come to work each day, and this is why our company exists. This is our purpose._TrinityRail_ provides- Railcar Manufacturing: https://www.trinityrail.com/products/- Railcar Leasing Solutions: https://www.trinityrail.com/leasing/- Railcar Maintenance & Parts: https://www.trinityrail.com/maintenance/- Fleet Management Services: https://www.trinityrail.com/fleet-management/For more information, visit us at trinityrail.com.Learn more about Trinsight®: https://www.trinityrail.com/trinsight/Trinsight is _TrinityRail_ 's cloud-based platform purpose-built to bring your fleet into focus, allowing you to transform and streamline your supply chain with real-time tracking, analysis and management features that modern logistics demandsVideo tranFor decades, _TrinityRail_ has been delivering the goods that keep North America moving. A humble promise to transport the everyday things that make everybody's lives better. It's our commitment to being stewards of the supply chain connecting companies with customers. People with products and Delivering Goods for the Good of All. While we've built one of the broadest and deepest railcar platforms in the world, to us it's what's on the inside that counts. And the purpose these products serve for you like grain the secret ingredient for making memories, or gravel that paves the way for a getaway, fuel to power the road trip of a lifetime, cars that transport us to exciting new places, and essential chemicals that purify our water food and promote a healthy way of life. Indispensable goods that truly move us and keep our lives, and our economy rolling. TrinityRail is proud to

Trinity Industries is searching for a talented team player to fill the open position of Sr. Network Architect in our Dallas, Texas headquarters office.

The Senior Network Architect will serve as the principal technical authority for Trinity’s enterprise network infrastructure. This role provides strategic leadership across campus, data center, cloud, and wide-area network domains; drives the adoption of modern network architectures including Zero Trust, SD-WAN, and cloud-native networking; and partners with security, cloud, and application teams to deliver resilient, scalable, and secure connectivity. The Senior Network Architect will mentor engineers, develop technology roadmaps, and translate business requirements into actionable network designs that align with Trinity’s long-term objectives.

What you’ll do:

• Serve as the principal technical expert for all enterprise networking across Trinity Industries IT, including services delivered directly by Trinity and those provided by managed service and carrier partners
• Design and lead the implementation of scalable, highly available network architectures across campus, data center, WAN, and multi-cloud environments
• Lead the evaluation and adoption of Zero Trust Network Access (ZTNA) principles, micro-segmentation, and identity-aware networking to advance Trinity’s security posture
• Own network security architecture, including next-generation firewalls (Palo Alto/Firepower/Fortigate), IDS/IPS, network access control (NAC), DNS security, and DDoS mitigation strategies
• Architect and govern SD-WAN strategy, including underlay/overlay design, traffic engineering, and integration with cloud on-ramps (Azure Virtual WAN, AWS Transit Gateway)
• Drive network automation and infrastructure-as-code (IaC) practices using tools such as Ansible, Terraform, Python, and CI/CD pipelines to reduce manual operations and increase deployment velocity
• Establish and maintain comprehensive network observability through monitoring, telemetry (NetFlow/sFlow/streaming telemetry), and AIOps tooling to enable proactive capacity planning and rapid incident response
• Develop and maintain network-centric disaster recovery, business continuity, and incident response plans; conduct regular testing to validate RTO/RPO objectives
• Partner with IT Security and Compliance teams to ensure network architecture meets regulatory and audit requirements (SOX, NIST CSF, CIS Controls)
• Build and maintain technology roadmaps, architecture standards, and design documentation; present recommendations and investment cases to IT leadership and executive stakeholders
• Mentor and guide a team of network engineers; foster a culture of continuous learning, operational excellence, and engineering rigor

What You’ll Need:

• Bachelor’s degree in Computer Science, Information Technology, or a related field required; Master’s degree or equivalent professional experience preferred
• 10+ years of progressive network engineering experience, with at least 3 years in a senior architect or technical lead capacity
• Active industry certification required: CCNP (Enterprise or Security), Fortinet NSE 7/8, or equivalent; cloud networking certifications (Azure Network Engineer Associate, AWS Advanced Networking) strongly preferred
• Deep expertise in routing and switching: BGP, OSPF, EIGRP, MPLS, VXLAN/EVPN, STP/RSTP, 802.1Q, and QoS design
• Hands‑on experience with SD‑WAN platforms (Cisco, Fortinet, or Palo Alto) including policy‑based routing, application‑aware path selection, and WAN optimization
• Demonstrated experience architecting hybrid and multi‑cloud network connectivity, including Azure ExpressRoute, Azure Virtual WAN, VPN Gateways, AWS Direct Connect, and cloud‑native network security services
• Solid grounding in network security architecture: NGFW, IDS/IPS, NAC (Cisco ISE or FortiNAC), network segmentation, Zero Trust principles, and PKI/certificate management
• Proficiency in network automation and scripting: Python, Ansible, Terraform, REST APIs, NETCONF/YANG, and Git‑based version control for infrastructure‑as‑code workflows
• Experience with enterprise design, lifecycle management and relevant vendor tools (Cisco DNA Center/Catalyst Center, FortiManager, or equivalent)
• Experience with enterprise wireless design and lifecycle management (WLC 9800, or equivalent) including Wi‑Fi 6/6E deployment and RF planning
• Familiarity with network observability platforms (SolarWinds, ThousandEyes, Cisco AppDynamics, Grafana, or similar) and experience operationalizing streaming telemetry and AIOps for proactive operations
• Experience with load balancing and application delivery (Citrix ADC/NetScaler, F5, or cloud‑native equivalents) and a working knowledge of TLS/SSL inspection and application layer networking
• Proven ability to perform network security assessments and audits; experience remediating findings against regulatory frameworks such as NIST CSF, CIS Controls, or SOX IT General Controls
• Strong vendor and carrier management skills, with experience negotiating and managing WAN/MPLS/internet circuit contracts and SLAs
• Excellent written and verbal communication skills; proven ability to translate complex technical architecture into clear executive‑level presentations and business cases

EOE

Trinity Industries, Inc., and its subsidiary or affiliated companies (hereinafter “Trinity”) are committed to equal employment opportunity. It is our policy to consider candidates for employment without regard to race, color, sex, sexual orientation, gender identity, religion, age, national origin, disability, or veteran status.

Trinity participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S.

Trinity is committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation because of a disability for any part of the employment process, please send an e-mail to [e-mail] . This email address should only be used for accommodations and not general inquiries or resume submittals.