Principle Network Architect

Key Responsibilities Own the network architecture standards and Building Block topology framework for the physicalsecurity estate, setting the designs the senior team builds against. Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecturestandards and cable-cut survivability requirements for critical zones. Establish network security and configuration standards, and the zero-touch-config automation strategythat governs deployment at scale. Set monitoring, inventory and observability standards (NetBox, SolarWinds, PRTG, Syslog) for thenetwork estate. Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendorselection across Cisco / Juniper / Arista. Serve as the final escalation point for the most complex network incidents and architectural decisions. Partner with the Infrastructure Engineering team and program leadership to align network architecturewith shared security boundaries, governance, SLAs and KPIs. Author and approve network architecture standards, design documentation and runbooks; drivecontinuous improvement of resilience and security posture. Mentor and develop senior network engineers, establishing best practices and building long-termnetwork engineering capability.Required Skills 10+ years of enterprise network engineering, including architecture leadership and standardsownership in large or critical environments. Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switchingand segmentation expertise. Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, includingsurvivability strategy for critical zones. Strong network automation and zero-touch-config leadership (Python / Ansible) and standardsdefinition. Monitoring and inventory architecture (NetBox, SolarWinds, PRTG, Syslog); hardware / firmwarelifecycle and vendor management. Demonstrated network architecture leadership — standards ownership, cross-functional partnership,mentoring and escalation leadership. Certifications — Required: Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalentarchitect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.Tools Required Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access andsegmentation. High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-cut survivability. Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment. Monitoring & Vendors: NetBox, SolarWinds, PRTG and Syslog analysis; Cisco / Juniper / Aristaplatforms; hardware / firmware EOL refresh.Salary Range$54.81 - $86.54 USD (Hourly)Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.Astreya offers comprehensive benefits to all Regular, Full-Time Employees,including:Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees onlyDental provided through UHCNationwide Vision provided by UHCFlexible Spending Account for Health & Dependent CarePre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and CourseraCorporate Wellness Program provided by Goomi GroupEmployee Assistance ProgramWellness Days401k PlanBasic and Supplemental Life InsuranceShort Term & Long Term DisabilityCritical Illness, Critical Hospital, and Voluntary Accident InsuranceTuition Reimbursement (available 6 months after start date, capped)Paid Time Off (accrued and prorated, maximum of 120 hours annually)Paid HolidaysAny other statutory leaves, paid time, or other ancillary benefits required under state and federal lawSummaryLocation: Boulder, COType: Full time