Sr. Network Architect

Sr. Network ArchitectTrinity Industries is searching for a talented team player to fill the open position of Sr. Network Architect in our Dallas, Texas headquarters office. The Senior Network Architect will serve as the principal technical authority for Trinity's enterprise network infrastructure. This role provides strategic leadership across campus, data center, cloud, and wide-area network domains; drives the adoption of modern network architectures including Zero Trust, SD-WAN, and cloud-native networking; and partners with security, cloud, and application teams to deliver resilient, scalable, and secure connectivity. The Senior Network Architect will mentor engineers, develop technology roadmaps, and translate business requirements into actionable network designs that align with Trinity's long-term objectives.What you'll do:Serve as the principal technical expert for all enterprise networking across Trinity Industries IT, including services delivered directly by Trinity and those provided by managed service and carrier partnersDesign and lead the implementation of scalable, highly available network architectures across campus, data center, WAN, and multi-cloud environmentsLead the evaluation and adoption of Zero Trust Network Access (ZTNA) principles, micro-segmentation, and identity-aware networking to advance Trinity's security postureOwn network security architecture, including next-generation firewalls (Palo Alto/Firepower/Fortigate), IDS/IPS, network access control (NAC), DNS security, and DDoS mitigation strategiesArchitect and govern SD-WAN strategy, including underlay/overlay design, traffic engineering, and integration with cloud on-ramps (Azure Virtual WAN, AWS Transit Gateway)Drive network automation and infrastructure-as-code (IaC) practices using tools such as Ansible, Terraform, Python, and CI/CD pipelines to reduce manual operations and increase deployment velocityEstablish and maintain comprehensive network observability through monitoring, telemetry (NetFlow/sFlow/streaming telemetry), and AIOps tooling to enable proactive capacity planning and rapid incident responseDevelop and maintain network-centric disaster recovery, business continuity, and incident response plans; conduct regular testing to validate RTO/RPO objectivesPartner with IT Security and Compliance teams to ensure network architecture meets regulatory and audit requirements (SOX, NIST CSF, CIS Controls)Build and maintain technology roadmaps, architecture standards, and design documentation; present recommendations and investment cases to IT leadership and executive stakeholdersMentor and guide a team of network engineers; foster a culture of continuous learning, operational excellence, and engineering rigorQualifications:What You'll Need:Bachelor's degree in Computer Science, Information Technology, or a related field required; Master's degree or equivalent professional experience preferred10+ years of progressive network engineering experience, with at least 3 years in a senior architect or technical lead capacityActive industry certification required: CCNP (Enterprise or Security), Fortinet NSE 7/8, or equivalent; cloud networking certifications (Azure Network Engineer Associate, AWS Advanced Networking) strongly preferredDeep expertise in routing and switching: BGP, OSPF, EIGRP, MPLS, VXLAN/EVPN, STP/RSTP, 802.1Q, and QoS designHands-on experience with SD-WAN platforms (Cisco, Fortinet, or Palo Alto) including policy-based routing, application-aware path selection, and WAN optimizationDemonstrated experience architecting hybrid and multi-cloud network connectivity, including Azure ExpressRoute, Azure Virtual WAN, VPN Gateways, AWS Direct Connect, and cloud-native network security servicesSolid grounding in network security architecture: NGFW, IDS/IPS, NAC (Cisco ISE or FortiNAC), network segmentation, Zero Trust principles, and PKI/certificate managementProficiency in network automation and scripting: Python, Ansible, Terraform, REST APIs, NETCONF/YANG, and Git-based version control for infrastructure-as-code workflowsExperience with enterprise design, lifecycle management and relevant vendor tools (Cisco DNA Center/Catalyst Center, FortiManager, or equivalent)Experience with enterprise wireless design and lifecycle management (WLC 9800, or equivalent) including Wi-Fi 6/6E deployment and RF planningFamiliarity with network observability platforms (SolarWinds, ThousandEyes, Cisco AppDynamics, Grafana, or similar) and experience operationalizing streaming telemetry and AIOps for proactive operationsExperience with load balancing and application delivery (Citrix ADC/NetScaler, F5, or cloud-native equivalents) and a working knowledge of TLS/SSL inspection and application layer networkingProven ability to perform network security assessments and audits; experience remediating findings against regulatory frameworks such as NIST CSF, CIS Controls, or SOX IT General ControlsStrong vendor and carrier management skills, with experience negotiating and managing WAN/MPLS/internet circuit contracts and SLAsExcellent written and verbal communication skills; proven ability to translate complex technical architecture into clear executive-level presentations and business casesPrimary Location: US-TX-DallasWork Locations: Dallas TX - Plant 2099 14221 N. Dallas Parkway Suite 1100 Dallas 75254Job: IT AdministrationOrganization: United StatesSchedule: RegularShift: StandardEmployee Status: Non-ManagementJob Type: Full-timeJob Level: Day JobJob Posting: Jul 29, 2026, 4:19:32 PM EE Pay Type : Salaried