LAN Network Architect (Indianapolis)

Job Summary:

We are seeking an experienced LAN Architect with deep expertise in Cisco and Juniper campus networking and Cisco Identity Services Engine (ISE) to join the global network engineering team of a leading pharmaceutical company. In this role, you will serve as the secondary architect for the LAN and ISE domains, partnering closely with the primary architect to design, secure, and evolve a large enterprise campus environment that supports research, manufacturing, and business operations.

Key Responsibilities:

• Partner with the primary LAN/ISE architect to own the design, standards, and roadmap for the enterprise campus LAN and network access control environment, providing full coverage and continuity across both domains.
• Design and document scalable, highly available campus network architectures using Cisco Catalyst and Juniper EX/QFX switching platforms.
• Architect, deploy, and maintain Cisco ISE policy for 802.1X, MAB, guest, posture, profiling, and TrustSec/segmentation use cases.
• Develop high- and low-level designs, configuration standards, and implementation plans for new builds, refreshes, and site expansions.
• Serve as a senior escalation point for complex LAN and ISE issues, leading root cause analysis and driving long-term fixes.
• Work with security, wireless, and operations teams to align network access policy with enterprise security and compliance requirements.
• Evaluate lifecycle status of hardware and software, and recommend upgrade and refresh plans that keep the environment current and supported.
• Mentor engineers and produce clear documentation, runbooks, and knowledge transfer materials for operations teams.

Required Skills & Qualifications:

• 8+ years of enterprise network engineering experience, including 3+ years in an architect or senior design role
• Deep hands-on expertise with Cisco campus switching (Catalyst 9000 series, IOS-XE) and Juniper switching (EX/QFX, Junos)
• Strong experience designing and operating Cisco ISE in a large, multi-site enterprise (802.1X, MAB, profiling, posture, guest, pxGrid)
• Solid understanding of Layer 2/Layer 3 protocols including VLANs, STP, OSPF, BGP, VRFs, and multicast
• Experience with network segmentation strategies such as TrustSec/SGTs or VRF-based designs
• Proven ability to produce architecture documents, design standards, and implementation plans
• Strong communication skills and comfort working with technical teams and business stakeholders alike

Preferred Qualifications:

• CCIE (Enterprise Infrastructure or Security), CCNP, or JNCIP/JNCIE certifications
• Experience with Cisco DNA Center/Catalyst Center or Juniper Mist automation and assurance
• Experience in a pharmaceutical, life sciences, or other regulated (GxP) environment
• Familiarity with network automation tools such as Ansible or Python
• Experience with Cisco Wireless and integrating wireless access with ISE policy