Key Responsibilities

● Own the network architecture standards and Building Block topology framework for the physical

security estate, setting the designs the senior team builds against.

● Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecture

standards and cable-cut survivability requirements for critical zones.

● Establish network security and configuration standards, and the zero-touch-config automation strategy

that governs deployment at scale.

● Set monitoring, inventory and observability standards (NetBox, SolarWinds, PRTG, Syslog) for the

network estate.

● Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendor

selection across Cisco / Juniper / Arista.

● Serve as the final escalation point for the most complex network incidents and architectural decisions.

● Partner with the Infrastructure Engineering team and program leadership to align network architecture

with shared security boundaries, governance, SLAs and KPIs.

● Author and approve network architecture standards, design documentation and runbooks; drive

continuous improvement of resilience and security posture.

● Mentor and develop senior network engineers, establishing best practices and building long-term

network engineering capability.

Required Skills

● 10+ years of enterprise network engineering, including architecture leadership and standards

ownership in large or critical environments.

● Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switching

and segmentation expertise.

● Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, including

survivability strategy for critical zones.

● Strong network automation and zero-touch-config leadership (Python / Ansible) and standards

definition.

● Monitoring and inventory architecture (NetBox, SolarWinds, PRTG, Syslog); hardware / firmware

lifecycle and vendor management.

● Demonstrated network architecture leadership — standards ownership, cross-functional partnership,

mentoring and escalation leadership.

● Certifications — Required: Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalent

architect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.

Tools Required

● Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access and

segmentation.

● High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-

cut survivability.

● Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment.

● Monitoring & Vendors: NetBox, SolarWinds, PRTG and Syslog analysis; Cisco / Juniper / Arista

platforms; hardware / firmware EOL refresh.

Salary Range

$54.81 - $86.54 USD (Hourly)

Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Astreya offers comprehensive benefits to all Regular, Full-Time Employees, including:

Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only
Dental provided through UHC
Nationwide Vision provided by UHC
Flexible Spending Account for Health & Dependent Care
Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)
Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera
Corporate Wellness Program provided by Goomi Group
Employee Assistance Program
Wellness Days
401k Plan
Basic and Supplemental Life Insurance
Short Term & Long Term Disability
Critical Illness, Critical Hospital, and Voluntary Accident Insurance
Tuition Reimbursement (available 6 months after start date, capped)
Paid Time Off (accrued and prorated, maximum of 120 hours annually)
Paid Holidays
Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law