Network Architect (On Site)

Boys Town is seeking an experienced Network Architect to design and lead the strategy, architecture, and evolution of a secure, scalable, high‑performing enterprise network environment. The role focuses on developing advanced network solutions that support business objectives while ensuring reliability, performance, and security across all systems.

The ideal candidate brings expert‑level knowledge of network protocols (routing, switching, segmentation), as well as extensive experience with network virtualization and software‑defined architectures. Strong expertise in Cisco technologies is essential, including Cisco Firewalls, Cisco ACI, Cisco DNA Center, and Cisco Identity Services Engine.

Applicants must be currently authorized to work in the United States on a full‑time basis.

Position is on site.

We are not offering sponsorship to applicants for employment visa status.

Responsibilities and Duties

• Lead the architectural design and development of the organization’s LAN, WAN, WLAN, and cloud‑based network infrastructure.
• Define networking standards, design methodologies, best practices, and documentation to ensure consistent implementation across all locations.
• Serve as the primary architect for secure network frameworks including firewalls, segmentation, SD‑WAN, cloud integration, Cisco ACI, Cisco ISE/DNA, data‑center architecture, and access control.
• Oversee the technical design and deployment of Cisco ACI, Cisco DNA Center, and ISE policy‑based architectures across the enterprise.
• Develop network security strategies and govern firewall policies using Cisco technologies, with advanced knowledge of App‑ID, User‑ID, Device‑ID, FirePower Management Center, and ACI east‑west segmentation.
• Evaluate emerging networking technologies, tools, and protocols for strategic implementation; lead proof‑of‑concepts and pilots.
• Collaborate with senior leadership, application teams, information security, and operations to translate business requirements into scalable and resilient network solutions.
• Direct and mentor engineering staff on implementation of network architecture and troubleshooting of complex network issues.
• Own the lifecycle of network systems—planning, budgeting, design, implementation, and decommissioning.
• Build and maintain detailed network documentation including high‑level and low‑level design diagrams, IP schema, and security zones.
• Serve as a key escalation point for critical incidents, architecture questions, and vendor coordination.
• Lead enterprise network projects such as site expansions, infrastructure modernization, and cloud networking integrations.
• Ensure all network solutions comply with security, compliance, and privacy regulations.

Knowledge, Skills, and Abilities

• Expert‑level understanding of enterprise networking concepts: IP internetworking, LAN/WAN architecture, dynamic routing protocols (BGP, OSPF, EIGRP), high availability, network virtualization, and SDN.
• Deep expertise in Cisco FirePower firewall ecosystems including cloud and on‑prem integrations, east‑west segmentation in ACI, and centralized policy management via Cisco FirePower.
• Comprehensive knowledge of Cisco technologies—Cisco ACI, Cisco DNA Center, and Cisco ISE.
• Strong understanding of cloud networking (Azure, AWS, etc.) and hybrid architectures.
• Proven ability to develop architectural roadmaps and execute long‑term infrastructure strategies.
• Excellent leadership, mentoring, and interpersonal communication skills.
• Strong analytical and problem‑solving skills; ability to evaluate trade‑offs and develop pragmatic solutions.
• Ability to lead technical conversations and clearly communicate complex ideas to non‑technical stakeholders.

Required Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field (or equivalent combination of education and experience).
• Minimum of 7 years of progressive network engineering experience, with at least 2 years in a lead or architect level role.
• Proven experience with large‑scale network architecture and multi‑site environments.
• Experience designing and deploying security‑centric architectures in both traditional and cloud environments.
• Valid driver’s license with a good driving record.
• Pass an annual Motor Vehicle Registration (MVR) check.
• Ability to provide own transportation and meet company auto insurance requirements.
• Ability to travel to Boys Town locations as needed.
• Participation in an escalated on‑call rotation for critical network issues.

Preferred Qualifications

• Cisco CCNP/CCIE, Palo Alto PCNSE, or similar architecture‑level certifications.
• Experience with SD‑WAN, Azure networking, and network automation (e.g., Ansible, Python scripting).
• Prior experience in healthcare, education, or nonprofit environments.

Other Duties

• This job description incorporates the essential functions and duties required for this position; other duties may be required and assigned as determined by a supervisor.
• Serves as a role model in carrying out activities and behaviors that reflect the values and principles of the Boys Town mission.

Physical Requirements, Equipment Usage, Work Environment

• May occasionally require physical activity related to infrastructure assessments including climbing ladders, accessing confined spaces, and lifting equipment up to 50 lbs.
• Office environment with some work in network rooms, data centers, and remote facilities. Occasional travel is required to Boys Town locations.

Boys Town is an equal employment opportunity employer and participates in the E‑Verify program. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and/or expression, national origin, age, disability, or veteran status. To request a disability‑related accommodation in the application process, contact us at View phone number on click.appcast.io.