Lead Network Engineer ( understanding of network architecture ) - 15+ years of experience

Job Title : Lead Network Engineer ( understanding of network architecture ) - 15+ years of experience

Location: New York, NY (onsite)

We are currently seeking candidates who meet the following qualification

Mandatory Qualifications

• Hands-on experience as Network Architect with:
  • Expertise in IP scheduling, Cisco network configuration. EIGRP, network configs of VoIP including QOS, spanning tree, Wi-Fi technologies, firewalls, hosts, servers and storage, NAC devices
  • Seeking an experienced consultant to provide strategic and hands-on support for a CUNY-wide Re-IP initiative, routing and switching review, and multi-cloud networking design, load balancing architecture, DDI based on Infoblox.
  • The consultant will help assess the current state environment, identify technical and operational risks, develop a target state design, and support implementation planning and execution across on-premises and cloud environments.
  • This role requires deep expertise in enterprise networking, IP addressing and segmentation, network security, load balancing, and hybrid/multi-cloud connectivity.
  • Experience in complex multi-site environments is strongly preferred.

Duties/Responsibilities

• Assess the current campus IP addressing scheme, routing design, VLANs, and dependency mapping.
• Develop a Re-IP strategy and migration plan for campus networks, including academic, administrative, data center, wireless, and other specialty networks.
• Identify dependencies and risks related to:
  • DHCP
  • DNS
  • Firewalls
  • NAC / 802.1X
  • VPN
  • Load balancers
  • Server subnets
  • Printers
  • VoIP
  • Building systems / IoT
  • Application allowlists
• Design a target-state IP addressing framework with appropriate subnetting, summarization, segmentation, naming standards, and documentation.
• Provide cutover sequencing, rollback planning, and risk mitigation recommendations.
• Support validation of routing, reachability, application dependencies, and service continuity during and after migration.
• Advise on best practices to minimize business disruption during the Re-IP effort.
• Perform a detailed audit of the current-state campus and data center network environment.
• Review and document:
  • Core, distribution, and access layer architecture
  • Routing protocols and route advertisements
  • VLAN and subnet allocation
  • WAN connectivity
  • Firewall zones and segmentation
  • Wireless network dependencies
  • High availability and resiliency design
  • Edge connectivity and internet ingress/egress
  • DNS/DHCP/IPAM practices
  • Operational support model and configuration consistency
• Identify gaps, risks, technical debt, single points of failure, and scalability concerns.
• Assess network configuration standards, documentation quality, and change control readiness.
• Provide findings and recommendations aligned to enterprise networking best practices.
• Deliver an audit report with priorities categorized as:
  • Critical
  • High
  • Medium
  • Low
• Implement all recommended changes in a change window.
• Validate success in post implementation testing.
• Provide post change supportto ensure environment stability.
• Assess current and future state connectivity requirements across on-premises, private hosting, and public cloud platforms.
• Design or refine network architecture for hybrid/multi-cloud environments, including:
  • Cloud connectivity
  • Routing and failover
  • Traffic segmentation
  • Security zoning
  • East-west and north-south traffic flows
• Review and recommend architecture for load balancing across cloud-hosted workloads.
• Support design and evaluation of:
  • Local and global load balancing
  • Layer 4 / Layer 7 services
  • SSL/TLS offload
  • Health monitoring
  • WAF integration
  • Traffic steering
  • High availability and disaster recovery patterns
• Provide guidance on cloud-native and enterprise load balancing options across Azure, AWS, and/or Google Cloud Platform, as applicable.
• Ensure designs account for:
  • Performance
  • Resiliency
  • Security
  • Scalability
  • Operational supportability
    If you meet these qualifications, please submit your application via link provided in Linkedin
    Kindly do not call the general line to submit your application.