LAN Network Architect

Job Description

Job Summary:

\n

We are seeking an experienced LAN Architect with deep expertise in Cisco and Juniper campus networking and Cisco Identity Services Engine (ISE) to join the global network engineering team of a leading pharmaceutical company. In this role, you will serve as the secondary architect for the LAN and ISE domains, partnering closely with the primary architect to design, secure, and evolve a large enterprise campus environment that supports research, manufacturing, and business operations.

\n

\n

Key Responsibilities:

\n

\n
• Partner with the primary LAN/ISE architect to own the design, standards, and roadmap for the enterprise campus LAN and network access control environment, providing full coverage and continuity across both domains.
\n
• Design and document scalable, highly available campus network architectures using Cisco Catalyst and Juniper EX/QFX switching platforms.
\n
• Architect, deploy, and maintain Cisco ISE policy for 802.1X, MAB, guest, posture, profiling, and TrustSec/segmentation use cases.
\n
• Develop high- and low-level designs, configuration standards, and implementation plans for new builds, refreshes, and site expansions.
\n
• Serve as a senior escalation point for complex LAN and ISE issues, leading root cause analysis and driving long-term fixes.
\n
• Work with security, wireless, and operations teams to align network access policy with enterprise security and compliance requirements.
\n
• Evaluate lifecycle status of hardware and software, and recommend upgrade and refresh plans that keep the environment current and supported.
\n
• Mentor engineers and produce clear documentation, runbooks, and knowledge transfer materials for operations teams.
\n

\n

\n

Required Skills & Qualifications:

\n

\n
• 8+ years of enterprise network engineering experience, including 3+ years in an architect or senior design role
\n
• Deep hands-on expertise with Cisco campus switching (Catalyst 9000 series, IOS-XE) and Juniper switching (EX/QFX, Junos)
\n
• Strong experience designing and operating Cisco ISE in a large, multi-site enterprise (802.1X, MAB, profiling, posture, guest, pxGrid)
\n
• Solid understanding of Layer 2/Layer 3 protocols including VLANs, STP, OSPF, BGP, VRFs, and multicast
\n
• Experience with network segmentation strategies such as TrustSec/SGTs or VRF-based designs
\n
• Proven ability to produce architecture documents, design standards, and implementation plans
\n
• Strong communication skills and comfort working with technical teams and business stakeholders alike
\n

\n

\n

Preferred Qualifications:

\n

\n
• CCIE (Enterprise Infrastructure or Security), CCNP, or JNCIP/JNCIE certifications
\n
• Experience with Cisco DNA Center/Catalyst Center or Juniper Mist automation and assurance
\n
• Experience in a pharmaceutical, life sciences, or other regulated (GxP) environment
\n
• Familiarity with network automation tools such as Ansible or Python
\n
• Experience with Cisco Wireless and integrating wireless access with ISE policy
\n

\n