Network Engineer

Job Title: Senior Network Infrastructure Architect (SASE & SD-WAN)

Role Overview
We are seeking a Senior Network Infrastructure Architect to lead the transformation of our enterprise networking environment. This is a hands-on, high-impact role for an engineer who is ready to move beyond traditional hardware-centric networking and into the world of Software-Defined Networking (SDN), Secure Access Service Edge (SASE), and Zero Trust Network Access (ZTNA).
You will own the lifecycle of our next-generation network strategy-from developing roadmaps and low-level engineering designs to providing Tier-3 subject matter expertise for our most complex production incidents. The ideal candidate is a collaborative "bridge builder" who can design secure, holistic solutions that integrate Cloud (Azure), LAN, WAN, and Wireless environments into a single, automated fabric.

Key Responsibilities
Strategy, Design & Automation
• Next-Gen Architecture: Architect and design advanced network solutions that support the transition to SASE and ZTNA frameworks. Proactively propose new standards that ensure our environment remains performant and secure.
• Network Automation: Spearhead the development of an SDN model across Cloud, LAN, WAN, and Wireless platforms. Integrate automation technologies with our observability stack to drive "AIOps" and proactive network management.
• Security-by-Design: Ensure security requirements (encryption, micro-segmentation, policy enforcement) are baked into the architecture, not bolted on.
• Roadmap Development: Partner with cross-functional architecture teams to build long-term technology roadmaps. Develop build instructions and implementation plans that the operations teams can execute with precision.

Operational Leadership & SME Support
• Tier-3 Escalation: Act as a final point of escalation for complex P1/P2 incidents. Lead root-cause analysis (RCA) efforts and design systemic action plans to prevent recurrence.
• Collaboration: Provide "subject matter expert" support to operations teams, acting as a coach and mentor while maintaining a strong pulse on current operational health and technical blockers.
• Vendor & Standards Stewardship: Liaise with 3rd-party vendors to evaluate new technologies and review change requests from peer teams to ensure they align with our "holistic solution" design philosophy.

Qualifications & Requirements
Minimum Qualifications
• Experience Baseline: Extensive experience implementing and developing vendor-agnostic Software-Defined Networking (SDN) platforms and network automation.
• Core Competencies: Deep, demonstrable experience in:
oSASE (Secure Access Service Edge) and ZTNA (Zero Trust Network Access) architectures.
oCloud-Native Networking: Specifically Azure networking.
oEnterprise Hardware: Advanced Cisco routing, switching, and Palo Alto firewall management.
• Technical Mastery: In-depth knowledge of L2/L3 connectivity, BGP, OSPF, IS-IS, VPN (IPSec/SSL/TLS), and DNS/DHCP.
• Certification: CCNP (Cisco Certified Network Professional) or equivalent level of professional certification.

Preferred Attributes
• Proven experience developing technology roadmaps based on strategic business inputs.
• Ability to translate high-level requirements into low-level engineering designs using Visio.
• Experience integrating network automation with modern monitoring and observability toolsets (e.g., AIOps-based solutions).
• Strong "bridge-building" soft skills-you must be comfortable working with cross-functional teams to drive holistic change rather than working in a silo.

Equal Opportunity Employer / Disabled / Protected Veterans

The Know Your Rights poster is available here:

The pay transparency policy is available here:

For temporary assignments lasting 13 weeks or longer, AllSTEM Connections is pleased to offer major medical, dental, vision, 401k and any statutory sick pay where required.

We are committed to working with and providing reasonable accommodations to individuals with disabilities. If you need a reasonable accommodation for any part of the employment process, please contact your staffing representative who will reach out to our HR team.

AllSTEM Connections participates in the E-Verify program in certain locations as required by law. Learn more about the E-Verify program.

We also consider for employment qualified applicants regardless of criminal histories, consistent with legal requirements, including, if applicable, the City of Los Angeles' Fair Chance Initiative for Hiring Ordinance. Pursuant to applicable state and municipal Fair Chance Laws and Ordinances, we will consider for employment-qualified applicants with arrest and conviction records, including, if applicable, the San Francisco Fair Chance Ordinance. For Los Angeles, CA applicants: Qualified applications with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Additional Skills

(none specified)


AllSTEM Representative Contact Info

Account Executive:


Nichols


Branch Phone:


View phone number on click.appcast.io


Location:


Ontario, CA