Network Architect

Senior Network Engineer / Network Architect - Cisco Nexus, Fortinet & Palo Alto


Position Overview


This role offers the opportunity to provide advanced technical leadership across enterprise networking, data-center switching, network security, firewall environments, monitoring, and network architecture. The position serves as the final L3 escalation point for complex network issues while supporting network assessments, architecture, performance optimization, major changes, and the transition toward a self-healing infrastructure model.


The role requires strong hands-on expertise across Cisco networking, Cisco Nexus data-center environments, Fortinet FortiGate, Palo Alto Networks firewalls, monitoring tools, and network automation.


Work Location / Schedule

• Candidate will be working from the client location and will remain the primary point of contact.
• Candidate may be required to visit the client location as and when required.
• Candidate may be required to visit client hospital locations and clinics.
• 25% travel will be required for project work to the client location.

What You'll Do / Key Responsibilities


Network & Security Assessment

• Assess FortiGate deployments, including FortiOS version currency, FortiManager/FortiAnalyzer integration, HA cluster configuration, SD-WAN posture, security fabric maturity, VPN, and threat-prevention profile alignment.
• Assess Palo Alto Networks deployments, including PAN-OS version currency, Panorama-based centralized management, HA configuration, GlobalProtect VPN posture, App-ID/User-ID/Content-ID adoption, WildFire integration, and security policy layering.
• Review firewall change-control processes, rule-review cadence, and rulebase governance.
• Lead data-center switching assessments across Cisco Nexus and Arista fabrics, including spine-leaf/VPC/MLAG design, EVPN-VXLAN posture where applicable, cabling and port-density review, capacity analysis, out-of-band management, and software-version currency.
• Review perimeter and network security controls, including firewall rulebase analysis, policy hygiene, shadowed/expired/unused rules, security profiles, and configuration standardization.
• Support risk-register and 30-60-90-day remediation roadmap development.
• Develop practice standards and standardized configuration templates for switch additions, network additions, firewall rule changes, data-center rack builds, and change activities.
• Contribute to hardware lifecycle, software/firmware currency, and end-of-life/end-of-support risk reviews.
• Perform network discovery using SolarWinds and other monitoring or discovery tools.

Advanced Troubleshooting & Incident Management

• Act as the final L3 escalation point for complex network issues involving QoS, OSPF, BGP, VLANs, STP, port channels, NAT, ACLs, and VPNs.
• Perform advanced packet and traffic analysis using tools such as Wireshark, FortiAnalyzer, and Syslog.
• Lead P1/P2 incident bridge calls, drive root cause analysis, and ensure timely resolution.
• Troubleshoot Cisco routing, switching, wireless, and security environments.
• Work with network discovery and CMDB platforms such as Device42, Lansweeper, ServiceNow Discovery, SolarWinds, or comparable platforms.
• Operate within ServiceNow ITSM environments, including incident, change, problem, and CMDB workflows.

Network Design & Architecture

• Contribute to and review HLD/LLD for new sites, migrations, segmentation initiatives, and firewall architectures.
• Validate designs for scalability, security, and adherence to enterprise standards.
• Recommend improvements across routing, switching, wireless, and security domains.
• Support data-center design patterns including spine-leaf topology, ECMP, jumbo frames, storage traffic isolation, and out-of-band management.

Firewall & Network Security

• Manage and optimize Fortinet FortiGate environments, including policies, NAT, UTM profiles, VPNs, routing, and HA.
• Audit firewall rules to support least-privilege access and compliance.
• Support segmentation, hardening, and compliance initiatives.

Network Optimization & Reliability

• Perform capacity planning, traffic analysis, and performance tuning.
• Monitor network health and proactively address chronic or systemic issues.
• Implement long-term preventive and resiliency measures.

Automation & Tooling

• Develop and maintain automation scripts using Python, Bash, and EEM.
• Automate configuration backups, compliance checks, and monitoring integrations.

Change Management & Migrations

• Lead major network changes, upgrades, firewall migrations, and routing redesigns.
• Prepare RFCs, rollback plans, risk assessments, and post-change reports.
• Coordinate with application, infrastructure, security, and ISP teams.

Vendor & ISP Management

• Work with ISPs and OEMs, including Cisco and Fortinet, on escalations, TAC cases, and hardware issues.
• Validate circuit performance and support last-mile troubleshooting.

Documentation & Knowledge Sharing

• Maintain network diagrams, SOPs, configuration standards, and runbooks.
• Improve L1/L2 documentation and operational processes.

Mentorship & Leadership

• Mentor L1/L2 engineers and promote best practices in troubleshooting and operations.
• Contribute to training plans, standards, and continuous improvement initiatives.

Required Qualifications

• 10-12 years of networking experience, including 3-4 years in an L3 or Architect-level role.
• Extensive hands-on experience with Cisco IOS/XE and NX-OS and SolarWinds.
• Strong expertise in routing, including OSPF and BGP.
• Strong switching expertise, including VLANs, STP, and EtherChannel.
• Strong experience with Fortinet FortiGate/FortiOS and Meraki wireless.
• Experience with Fortinet FortiGate and Palo Alto Networks firewalls.
• Experience with HA cluster configuration.
• Experience with SD-WAN posture, security fabric maturity, VPN, and threat-prevention profile alignment.
• Senior-level, hands-on Cisco Nexus data-center switching experience, including Nexus 9000/7000/5000 series, NX-OS upgrade planning, VPC design and operations, VXLAN/EVPN fabrics, FEX topologies where applicable, out-of-band management design, and greenfield rack-build execution.
• Experience with SD-WAN, VXLAN, Cisco DNaC, and Cisco ISE.
• Solid understanding of network security, VPNs, QoS, and segmentation.
• Experience with NMS/SNMP monitoring, Syslog, and packet-capture tools.
• Experience performing network discovery.
• Working knowledge of automation and scripting using Python, Bash, and EEM.
• CCNA or equivalent hands-on experience is required.
• Strong analytical and structured troubleshooting approach.
• Excellent communication during high-severity incidents.
• Proactive, detail-oriented, and automation-focused.
• Strong collaboration and mentoring mindset.
• Ability to perform occasional lifting of network equipment up to 50 lbs., if required.

Preferred Qualifications

• CCNP Enterprise.
• Fortinet NSE 4 or higher.
• Aruba Wireless.
• Extreme Networks.
• Juniper Networks.
• ITIL v4 Foundation.

What Makes HTC A Great Place To Build Your Future


HTC Global Services wants you to join our team. Come build new things with us and advance your career. At HTC Global, you'll collaborate with experts, work alongside clients, and be part of high-performing teams driving success together. You'll have long-term opportunities to grow your career and develop skills in the latest emerging technologies.


At HTC Global Services, our employees have access to a comprehensive benefits package. Benefits can include Group Health (Medical, Dental, and Vision), Paid Time Off, Paid Holidays, 401(k) matching, Group Life and Disability insurance, Professional Development opportunities, Wellness programs, and a variety of other perks.


Our success as a company is built on inclusion and diversity. HTC Global Services is committed to providing a workplace free from discrimination and harassment, where every employee is treated with dignity and respect. We celebrate differences and believe that diverse cultures, perspectives, and skills drive innovation and success. HTC is an Equal Opportunity Employer and a proud National Minority Supplier. We seek to empower each individual, fostering an environment where everyone feels valued, included, and respected.


PAY TRANSPARENCY TAGLINE:
For information on the compensation range and an overview of benefits offered by HTC Global Services, please email View email address on click.appcast.io. Salary, other compensation, and benefits information shared by HTC are accurate as of the date provided. The disclosed range may vary based on factors such as geographic location, education, relevant experience, certifications, skills, role fit, organizational needs & other factors as applicable. HTC Global Services reserves the right to modify ranges in accordance with governmental, state, and local requirements.


#LI-ST1 #LI-Onsite #CiscoNexus #Fortinet #PaloAlto #SolarWinds #NetworkSecurity #L3NetworkEngineer #NetworkArchitect #NXOS #VXLAN #EVPN #OSPF