Network Architect (On Site)

Job Summary Boys Town is seeking an experienced Network Architect to design and lead the strategy, architecture, and evolution of a secure, scalable, and high‑performing enterprise network environment. The role is responsible for developing advanced network solutions that support business objectives while ensuring reliability, performance, and security across all systems. Applicants must be currently authorized to work in the United States, must work full‑time on site, and Boys Town does not offer sponsorship for employment visa status. Key Responsibilities Leads the architectural design and development of the enterprise LAN, WAN, WLAN, and cloud‑based network infrastructure. Defines networking standards, design methodologies, best practices, and documentation to ensure consistent implementation across all locations. Serves as the primary architect for secure network frameworks including firewalls, segmentation, SD‑WAN, cloud integration, Cisco ACI, Cisco ISE/DNA, data center architecture, and access control. Oversees the technical design and deployment of Cisco ACI, Cisco DNA Center, and ISE policy‑based architectures across the enterprise. Develops network security strategies and governs firewall policies using Cisco technologies with advanced knowledge in App‑ID, User‑ID, Device‑ID, Firepower Management Center, and ACI east‑west segmentation. Evaluates emerging networking technologies, tools, and protocols for strategic implementation; leads proofs of concept and pilots. Collaborates with senior leadership, application teams, Information Security, and operations to translate business requirements into scalable and resilient network solutions. Directs and mentors engineering staff on implementation of network architecture and troubleshooting of complex network issues. Owns the lifecycle of network systems—planning, budgeting, design, implementation, and decommissioning. Builds and maintains detailed network documentation including high‑level and low‑level design diagrams, IP schema, and security zones. Serves as a key escalation point for critical incidents, architecture questions, and vendor coordination. Acts as the lead for enterprise network projects including site expansions, infrastructure modernization, and cloud networking integrations. Ensures all network solutions comply with security, compliance, and privacy regulations. Knowledge, Skills, and Abilities Expert‑level understanding of enterprise networking concepts: IP internetworking, LAN/WAN architecture, dynamic routing protocols (BGP, OSPF, EIGRP), high availability, network virtualization, and SDN. Deep expertise in Cisco Firepower firewall ecosystems including cloud and on‑prem integrations, east‑west segmentation in ACI, and centralized policy management via Cisco Firepower. Comprehensive knowledge of Cisco technologies, including Cisco ACI (both Application and Network Centric modes), Cisco DNA Center, and Cisco ISE. Strong understanding of cloud networking (Azure, AWS, etc.) and hybrid architectures. Proven ability to develop architectural roadmaps and execute long‑term infrastructure strategies. Excellent leadership, mentoring, and interpersonal communication skills. Strong analytical and problem‑solving skills; ability to evaluate trade‑offs and develop pragmatic solutions. Ability to lead technical conversations and clearly communicate complex ideas to non‑technical stakeholders. Qualifications Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent combination of education and experience) required. Minimum of 7 years of progressive experience in network engineering, with at least 2 years in a lead or architect‑level role required. Proven experience with large‑scale network architecture and multi‑site environments required. Experience designing and deploying security‑centric architectures in both traditional and cloud environments required. Possess a valid driver’s license with a good driving record required. Pass an annual Motor Vehicle Registration (MVR) check required. Ability to provide own transportation to complete travel requirements of job; meet auto insurance requirements established by Boys Town policy and/or State and Local law requirements. Ability to travel to Boys Town locations as needed required. Participates in an escalated on‑call rotation for critical network issues required. Preferred Qualifications Cisco CCNP/CCIE, Palo Alto PCNSE, or similar architecture‑level certifications preferred. Experience with SD‑WAN, Azure networking, and network automation (e.g., Ansible, Python scripting) preferred. Prior experience in healthcare, education, or nonprofit environments preferred. Other Duties This job description incorporates the essential functions and duties required for this position. However, other duties may be required and assigned at times and as determined by a supervisor in order to meet the needs of the organization. The Network Architect serves as a role model in carrying out activities and behaviors that reflect the values and principles of the Boys Town mission. Physical Requirements, Equipment Usage, Work Environment May occasionally require physical activity related to infrastructure assessments including climbing ladders, accessing confined spaces, and lifting equipment up to 50 lbs. Work will primarily occur in an office environment with some work in network rooms, data centers, and remote facilities. Occasional travel to Boys Town locations is required. EEO Statement Boys Town is an equal employment opportunity employer and participates in the E‑Verify program. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and/or expression, national origin, age, disability, or veteran status. To request a disability‑related accommodation in the application process, contact us at View phone number on click.appcast.io. #J-18808-Ljbffr