Network Systems Architect

SUMMARY:

This position is responsible for the enterprise design, build, and support of the global network infrastructure. Works closely with the US infrastructure team and leads projects to ensure high system availability, security, and performance.

RESPONSIBILITIES:

• Will lead global infrastructure and security initiatives to ensure that the company has a highly available, secure, and stable operating environment.
• Works in a multi-facility, global network consisting of companies in multiple countries, 450+ users, 120+ servers, and 900+ workstations. Maintains company asset inventory and ensures patching is performed monthly, and operating systems are upgraded before end of life.
• Enhances all systems architecture that includes the global network, VM, Wi-Fi, phone systems, Office365, and Azure services.
• Maintain a secure network environment by ensuring the security of multi-location firewalls, MPLS, VPN, network segmentation, Azure NSG, anti-virus, and EDR/MDR solutions.
• Manage Windows operating environment consisting of a multi-domain environment and Azure AD. Ensures end-user security with the implementation of MFA for all email and device access.
• Ensures digital certificates and renewals are performed for company assets.
• Advances technology infrastructure through the use of Azure cloud environment for network centralization, standardization, redundancy, and scalability.
• Ensures company assets are protected by leading disaster recovery and business continuity planning with documentation and annual tests.
• Excels in a fast-paced work environment takes ownership of project activities and keeps projects on schedule to meet company commitments.
• Assist security administrator with internal security policies for user access rights, PCI compliance, device policies, and other policies as assigned.
• Works with cross-functional IT teams to create best-in-class systems that support the growth of the company. Can effectively diagnose and resolve network performance problems through the use of diagnostic tools and techniques.
• Contribute to the development of the annual IT budget.

QUALIFICATIONS:

• Advanced degree in Computer Science, Computer Engineering, or related experience required.
• 10+ years of hands-on network, infrastructure, and security experience leading all infrastructure activities for a multi-location network with a similar number of company locations and assets.
• Proven leadership experience and communication skills with demonstrated success in leading large projects and keeping project milestones on schedule.
• Advanced knowledge of network concepts (VLAN, static routes, QOS, network segmentation). CISCO, Barracuda, or other network certification is required.
• High proficiency in Microsoft tools and technologies. Global domain administration and configuration experience required. MCSE certification preferred.
• High degree of security awareness with knowledge of specific tools and technologies to secure company network and email systems to prevent cyber-attacks or network intrusion.

TECHNICAL SKILLS (REQUIRED):

• Candidate must have knowledge of network principles to architect and modify LAN/WAN rules including programming firewalls, switches, Azure NSG and VLAN. Improve multi-site security through network segmentation and least privilege access across the network.
• Candidate can assist with knowledge and hands-on experience in the following technical disciplines:
• Design/Implementation/Support for firewalls, proxy services, intrusion detection, prevention services and DMZ
• Design/Implementation/Support for Network routers, switches and other network components
• Network/Security administration for performance tuning and component upgrades
• Network hardening /Cisco networking, VPN and QOS experience
• Microsoft Office 365 administration.
• Azure administration of servers and network infrastructure.
• Microsoft active directory, Azure AD and multi-domain configurations.
• Windows Server or Workstation provisioning and hardening.
• Virtual machine experience, including Azure VM, Azure AVD or VMware

• Experience securing web servers through use of reverse proxy or other hardening methods.
• Experience securing O365 email domains with knowledge of SPF, DKIM, DMARC and encryption methods.
• Experience with security tools such as Nmap, IIS Crypto and evaluation of ciphers, TLS to secure company servers.
• Tools or software that enable company-wide cloud backups.
• Network monitoring and troubleshooting

TECHNICAL SKILLS (preferred):

• Strong understanding of leading firewalls like Barracuda, Palao Alto and CheckPoint Etc.
• Azure environment knowledge is preferred
• Support Azure networking services
• Utilize Azure Monitoring tools to track the performance and health of cloud resources, and proactively identify and resolve issues.
• Conduct all Azure backups per backup and storage retention policy.