Enterprise/Network Architect NEW

Job description

Enterprise/Network Architect remote + 3/month in office

The Security/Enterprise/Network Architect is responsible for analyzing, designing, and documenting complex network environments and ensuring they meet best-practice, security, and high-availability standards.

Responsibilities

• Present complex network environments at different levels of detail—from high-level logical diagrams to detailed configuration schematics—in a way that is understandable to both technical teams and business stakeholders.
• Prepare documentation, presentations, and visualizations of network architecture to support decision-making and planning.
• Analyze complex environments, including physical and logical configurations at sites, propose optimal solutions, and clearly communicate recommendations.
• Conduct comprehensive analysis of technical documentation at the low-level design stage, as well as the actual configurations and systems operating across various sites.
• Ensure that all recommendations based on reviews and analyses are logically justified and presented in clear documentation and reports.
• Review existing projects and network environments, identify gaps, inconsistencies, and potential architectural issues, and prepare proposals for changes or design missing components in line with best practices, security requirements, and high-availability principles.
• Participate in defining requirements for providers and support implementation if needed, while not being directly responsible for implementing the proposed solutions.

Requirements

• Advanced knowledge of networking, including experience in designing and optimizing LAN, WAN, and Data Center solutions.
• Strong understanding of segmentation mechanisms, QoS, redundancy, and network security technologies such as firewalls, VPN, IDS/IPS, and NAC.
• Good command of English for working with documentation and communicating with vendors.

Preferred Experience

• Experience in designing or implementing remote access systems for industrial automation networks (OT/ICS), considering security requirements and IT/OT environment separation.
• Ability to design secure Internet access systems for critical environments, including traffic filtering, content inspection, application control, and integration with monitoring and incident response systems, with knowledge of standards such as IEC 62443 and NIST.
• Experience working with equipment from Cisco, Juniper, Fortinet, and Palo Alto.
• Preferred certifications: Cisco CCNP Security, CCNP Data Center, CCNP Enterprise, Juniper JNCIP/JNCIE, Fortinet NSE 4–7.
• Additional asset: cloud networking certifications (AWS/Azure Networking Specialty).

Please send your CV in English, we kindly inform we will contact selected candidates