ENTERPRISE NETWORK ARCHITECT

Directly accountable for designing and governing the enterprise and utility-specific network architecture to ensure alignment with business goals, technology strategies, and security requirements. Provide strategically focused direction, technical leadership, and architectural oversight for all network-related initiatives, including LAN/WAN, cloud networking, network security, and emerging technologies. Ensure all network security controls are implemented and managed in accordance with appropriate security principles, industry best practices, and applicable industry standards, including NERC CIP regulatory compliance standards. Partner and collaborate with infrastructure, operational, and other teams to effectuate scalable, secure, and resilient network architectures that support business and operational objectives and requirements. May serve as a project manager on network infrastructure projects and cross-train peers and other department team members, supporting knowledge sharing and development. Essential Functions Architect and drive the implementation of complex networks infrastructures, in collaboration with engineering, operations, compliance, and other business technology teams, to ensure network designs align with security policies and frameworks. Networks include, but are not limited to LAN, WAN, data center, cloud, and wireless networks that provide high availability, scalability, and security in both information technology (IT) and operation technology (OT) environments. Develop and maintain comprehensive enterprise network architecture roadmap, including blueprints/drawings, security policies and frameworks, hardware, software, and security that span on-premise, cloud, and hybrid environments. Drive the development and implementation of network security policies and framework, and enforce robust network security measures, including firewalls, VPNs, intrusion detection/prevention systems, and network segmentation. Lead and direct the implementation of network architecture initiatives, solutions, and proof-of-concept projects while collaborating with multi-disciplinary teams, affiliates, and partners to support existing and future solutions. Maintain compliance with corporate network infrastructure policies and procedures, and remain knowledgeable of new technologies, threats, regulations, standards, and best practices applicable to IT and OT environments. Develop and maintain detailed network documentation, including diagrams, configuration standards, and ensure all network solutions adhere to defined corporate policies and governance models. Leads governance processes to ensure network designs meet enterprise architecture standards. Identify and recommend improvements in processes, procedures, technologies, network expansion, hardware, software and other network improvements and innovations. Support the establishment and implementation of network testing benchmarks, cybersecurity internal controls, and monitoring strategies. Serves as an escalation point for complex technical problems, participates in on-call rotations to resolve emergent network issues in critical environments, and develop and conduct training programs. Provide architectural oversight during vendor evaluations and technology selection. Oversee network-related risk assessments and lead implementation of mitigation strategies. Contribute to disaster recovery and business continuity planning from a network design perspective. Perform other duties as applicable to the position or as assigned. NERC Compliance: Performs NERC Compliance Program roles if/as designated in Seminole's Standard Ownership Matrix (SOM) including ongoing evidence retention in "audit-ready" form. You should also be familiar with Seminole's Enterprise Internal Compliance Program (ENT-GCD-RGC-EP-054) to further your understanding of Seminole's compliance program and your duties and responsibilities in the SOM. Qualifications and Education Requirements Bachelor’s degree in Computer Science, Computer Engineering, Network Engineering, Telecommunications, or related discipline is required. Minimum of fifteen (15) years of progressive technical leadership experience in information technology space, with at least ten (10) years in network architecture or advanced network design roles in medium to large-scale environments and at least three (3) years of experience designing networks for both Information Technology (IT) and Operational Technology (OT) environments. Certification as a Cisco Certified Internetwork Expert (CCIE), Certified Information Systems Security Professional (CISSP), AWS Certified Advanced Networking – Specialty, or Certified Information Security Manager (CISM) is required. Familiarity with architecture frameworks such as The Open Group Architecture Framework (TOGAF), and design methodologies like Zero Trust or defense-in-depth are a plus. Core Competencies Adaptable Collaborative Communicator Critical-Thinking Detail-Oriented Outcome-Driven LAN/WAN Technologies, including MPLS, Wi-Fi, Cellular, SD-WAN, and Cloud Networking Architectures Network Design Tools and Modeling Routing Protocols (e.g., BGP, OSPF, EIGRP), Switching, VLANs, Firewalls, and Network Segmentation Strategies Technology Roadmaps and Lifecycle Management Plans IPv4/IPv6 Addressing, Subnetting and Segmentation. IT and OT Network Protocols and Architecture Network Design Cybersecurity Principles Network virtualization and software-defined networking (SDN) technologies Ability to produce detailed network diagrams and documentation Strong analytical and problem-solving abilities Effective written and verbal communication Strategic thinking and innovation Strong project planning, coordination, and collaboration skills Stakeholder engagement and influencing skills Ability to mentor junior cybersecurity analysts Physical Requirements Must be able to follow established protective measures including wearing required personal protective equipment (PPE). Must possess a valid driver’s license and acceptable Motor Vehicle Report. Working Conditions This position may require occasional travel and work outside of standard business hours, including overnight stays. While performing duties in certain areas of the plant or at substations, there is potential exposure to hazards typical of industrial environments. Flexibility to work extended hours and weekends may be necessary to meet project deadlines. Additionally, the role requires availability on a 24-hour basis to provide support in the event of critical system malfunctions, outages, or severe weather events. Disclaimer - Management may modify this job description at any time and may require the performance of additional duties, or modification of physical requirements, with or without advance notice. #J-18808-Ljbffr Seminole Electric Cooperative, Inc.