Network Architect

Lead Network & Security Engineer (L3 Architect)

Location: Buffalo, NY | Type: Full Time

Position Overview
Lead complex enterprise network and security environments, providing L3 support, architecture guidance, infrastructure assessments, and technical leadership. Strong hands-on expertise across Cisco data center networking, Fortinet/Palo Alto firewalls, network optimization, and automation is required.

Key Responsibilities

• Lead network and firewall assessments across Fortinet and Palo Alto environments.
• Provide advanced L3 troubleshooting for routing, switching, VPN, QoS, NAT, ACLs, and performance issues.
• Support Cisco Nexus data center environments, including NX-OS, VPC, VXLAN/EVPN, and HA.
• Review firewall policies, SD-WAN, segmentation, and security governance.
• Support SolarWinds and network monitoring/discovery tools.
• Lead network migrations, upgrades, major changes, and change management.
• Develop network standards, documentation, runbooks, and configuration templates.
• Mentor L1/L2 engineers and serve as the final technical escalation point.

Required Qualifications

• 10–12 years of network engineering experience, including 3–4 years at L3/Architect level.
• Strong hands-on experience with Cisco IOS/XE, NX-OS, and Nexus.
• Extensive Fortinet FortiGate and Palo Alto firewall experience.
• Experience with SolarWinds or similar monitoring tools.
• Strong knowledge of OSPF, BGP, VLANs, STP, EtherChannel, SD-WAN, VPN, and HA.
• Scripting/automation experience with Python, Bash, or EEM.
• CCNA or equivalent practical experience.

Preferred

• CCNP Enterprise.
• Fortinet NSE 4+.
• Aruba Wireless, Extreme, or Juniper experience.
• ITIL v4 Foundation.