Key Responsibilities

● Own the network architecture standards and Building Block topology framework for the physical

security estate, setting the designs the senior team builds against.

● Define perimeter-resilience and high-availability strategy, including ERPS / MSTP ring architecture

standards and cable-cut survivability requirements for critical zones.

● Establish network security and configuration standards, and the zero-touch-config automation strategy

that governs deployment at scale.

● Set monitoring, inventory and observability standards (NetBox, SolarWinds, PRTG, Syslog) for the

network estate.

● Own network hardware and firmware lifecycle strategy, EOL evaluation, refresh planning and vendor

selection across Cisco / Juniper / Arista.

● Serve as the final escalation point for the most complex network incidents and architectural decisions.

● Partner with the Infrastructure Engineering team and program leadership to align network architecture

with shared security boundaries, governance, SLAs and KPIs.

● Author and approve network architecture standards, design documentation and runbooks; drive

continuous improvement of resilience and security posture.

● Mentor and develop senior network engineers, establishing best practices and building long-term

network engineering capability.

Required Skills

● 10+ years of enterprise network engineering, including architecture leadership and standards

ownership in large or critical environments.

● Authoritative enterprise network design across Cisco / Juniper / Arista, with deep routing, switching

and segmentation expertise.

● Mastery of ERPS / MSTP ring protocols and high-availability perimeter design, including

survivability strategy for critical zones.

● Strong network automation and zero-touch-config leadership (Python / Ansible) and standards

definition.

● Monitoring and inventory architecture (NetBox, SolarWinds, PRTG, Syslog); hardware / firmware

lifecycle and vendor management.

● Demonstrated network architecture leadership — standards ownership, cross-functional partnership,

mentoring and escalation leadership.

● Certifications — Required: Cisco CCNP or Juniper JNCIS. Strongly preferred: CCIE or equivalent

architect-level credential; network automation (Python / Ansible); ERPS / MSTP design; ITIL 4.

Tools Required

● Standards & Access: 802.1X, VLAN segmentation, DNS, DHCP for secure network access and

segmentation.

● High-Availability Architecture: ERPS and MSTP ring topologies for perimeter resilience and cable-

cut survivability.

● Automation: zero-touch-config and scripting (Python / Ansible) for standardized, rapid deployment.

● Monitoring & Vendors: NetBox, SolarWinds, PRTG and Syslog analysis; Cisco / Juniper / Arista

platforms; hardware / firmware EOL refresh.

Salary Range

• Please note that the salary information provided herein is base pay only (gross); it does not include other forms of compensation which may or may not apply to this specific position, namely, performance-based bonuses, benefits-related payments, or other general incentives - none of which are guaranteed, may be subject to specific eligibility requirements, and are wholly within the discretion of Astreya to remit.
• Further, the salary information noted above is a range that consists of a minimum and maximum rate of pay for this specific position. Where an applicant or employee is placed on this range will depend and be contingent on objective, documented work-related considerations like education, experience, certifications, licenses, preferred qualifications, among other factors.

Astreya offers comprehensive benefits to all Regular, Full-Time Employees, including:

• Medical provided through UHC (PPO, HSA, Surest options) / Medical provided through Kaiser (HMO option only) for California employees only

• Dental provided through UHC

• Nationwide Vision provided by UHC

• Flexible Spending Account for Health & Dependent Care

• Pre-Tax Account for Commuter Benefit/Parking & Transit (location-specific)

• Continuing Education and Professional Development via various integrated platforms, e.g. Udemy and Coursera

• Corporate Wellness Program provided by Goomi Group

• Employee Assistance Program

• Wellness Days

  401k Plan

• Basic and Supplemental Life Insurance

• Short Term & Long Term Disability

• Critical Illness, Critical Hospital, and Voluntary Accident Insurance

• Tuition Reimbursement (available 6 months after start date, capped)

• Paid Time Off (accrued and prorated, maximum of 120 hours annually)

• Paid Holidays

• Any other statutory leaves, paid time, or other ancillary benefits required under state and federal law