Senior Network Architect

Description

Why clients love us

We are laser focused on delivering quality and excellence to our clients for their technology modernization needs, business and technology strategy, and cloud transformation initiatives. We are a nationally recognized Microsoft Partner of the Year and the largest, leading IT service provider headquartered in San Diego. As a Top 1% Microsoft Cloud Solution Provider, with engineers that individually hold over 38 Microsoft certifications, our clients trust us because we are the experts!

The value you bring

As one of the senior-most networking voices across Managed Solution’s largest managed network clients, including multi-site manufacturers, life-sciences and healthcare organizations with dozens of locations, cloud hubs, and regulated environments, the Senior Network Architect works across the full solution lifecycle. This is a hybrid role by design: the Senior Network Architect helps sell the right solution, designs it, builds it, and fixes it when it breaks, partnering with Sales and Presales to scope and architect network and security solutions, then implementing, remediating, and resolving escalated break/fix issues.

Equally important, this role raises the capability of the whole team by mentoring and training existing network engineers across the One Technical Team (managed and professional services teams), to include building documentation (diagrams, runbooks, inventories, and procedures) that gives every engineer what they need to succeed in a client’s environment. The ideal candidate is equally comfortable whiteboarding a target-state SD-WAN design with a client’s IT director, troubleshooting a down IPsec tunnel at 7 a.m., and walking a junior engineer through why it happened.

The Senior Network Architect will be responsible for the following:

What you’ll do

Architecture + Presales

• Partners with Sales, Presales, and Account Management to run technical discovery, assess current-state networks, and design fit-for-purpose solutions (SD-WAN, firewalls, LAN/WLAN, remote access/ZTNA, data center, and cloud networking).
• Produces architecture designs, target-state topologies, multi-phase roadmaps, and network maturity assessments for client leadership.
• Scopes work into Statements of Work and Rough Order of Magnitude (ROM) estimates, including tiered per-site estimating, assumptions, risks, and hours breakdowns.
• Presents recommendations and trade-offs (for example, vendor platform migrations, hub placement, and circuit diversity) to technical and executive audiences.
• Evaluates vendor platforms and lifecycle status (end-of-life/end-of-support hardware and software) and recommends refresh paths.

Implementation + Migration

Leads and executes network projects, including firewall and SD-WAN migrations (including Palo Alto to Fortinet), site rollouts built from standard templates, data center moves and vacates, subnet and routing migrations, load balancer migrations, and wireless/LAN refreshes.

Builds and maintains centrally managed configurations using FortiManager/FortiAnalyzer, Panorama, and the Meraki Dashboard, driving consistent policy packages and site templates.

Plans maintenance windows, change controls, and cutover and rollback plans, and coordinates with carriers, ISPs, SASE providers, and client application teams during changes.

Implements remote access and Zero Trust solutions (FortiClient/EMS, IPsec and SSL VPN with SAML/MFA, and ZTNA) integrated with Microsoft Entra ID and Duo.

Remediation, Break/Fix + Escalation

Serves as the senior-most escalation point for complex network incidents across managed clients, including WAN and tunnel outages, failover failures, routing issues, performance and throughput problems, wireless issues, and VPN/certificate problems – including requirement to perform occasional work outside of normal business hours as needed to successfully manage critical network incidents and ensure the success of scheduled outages, maintenances, and cutovers

Performs root-cause analysis, writes clear RCAs with corrective actions, and drives stabilization plans for unstable environments.

Troubleshoots application-impacting network issues (for example, clinical imaging/PACS traffic and RDS and ERP access over WAN) alongside client and vendor teams.

Works vendor and carrier support cases through to resolution (Fortinet, Palo Alto, Cisco/Meraki, Aryaka, and ISPs/circuit providers).

Participates in an after-hours escalation and maintenance-window rotation in support of Managed Solution’s 24x7 managed services.

Documentation + Knowledge Management

• Owns the “map” for key client environments, including network diagrams (Visio), site topologies, IP/VLAN/subnet records, master device lists, tunnel and peer inventories, circuit records, and routing documentation.
• Creates and maintains client network runbooks, standard operating procedures, configuration standards, naming conventions, and change procedures so that any engineer can support the environment.
• Keeps documentation current as sites are built, migrated, or changed, and reconciles naming and inventory across management, monitoring (LogicMonitor), and ticketing (ConnectWise) systems.
• Produces client-facing deliverables, including architecture design documents, as-built documentation, end-user guides, and handover packages.
• Technical Leadership, Mentoring, Training + Team Enablement
• Acts as technical lead for Networking-focused resources across the One Technical Team, including Senior Network Security Engineers, Project/Network Engineers, and Network Support Specialist, L2 positions.
• Mentors and coaches existing network engineers (L1–L3), raising their troubleshooting, design, and documentation skills through shadowing, paired work, and structured reviews.
• Delivers internal training sessions and lab walkthroughs on core technologies (FortiGate/SD-WAN, BGP/OSPF, IPsec, Meraki, and wireless) and on client environments.
• Defines and publishes team standards, including reference designs, build templates, peer review of changes, and escalation playbooks.
• Supports certification plans for team members and helps shape the networking skills roadmap for Professional and Managed Services.

Performance + Compliance

• Complies with all company and departmental policies and procedures and maintains strict client confidentiality.
• Consistently models the One Technical Team Pillars of Excellence: Accountability, Utilization, and Engagement.
• Performs other, related projects and duties as assigned.

Requirements

What makes you a fit

Education and Work Experience Requirements

A bachelor’s degree in computer science, information systems, engineering, or a related field, plus 8+ years of enterprise network engineering experience, including at least 3 years in an architect, senior consultant, or presales-facing role. Equivalent combinations of education and experience will be considered.

Experience at a managed service provider (MSP/MSSP) or IT consulting firm supporting multiple client environments strongly preferred.

Demonstrated experience running multi-site network migrations (20+ sites) from design through cutover.

Proven track record of mentoring engineers and producing high-quality technical documentation.

Exceptional written and verbal communication skills, including the ability to explain complex network designs to non-technical executives and to present with authority in presales meetings.

Documentation-first mindset, with a commitment to leaving every environment better documented than it was found.

A patient, generous teacher who enjoys growing other engineers.

Calm, methodical, and accountable under pressure during outages, and comfortable working autonomously across several client environments at once.

Strong organizational skills, with the ability to balance project delivery, escalations, and presales work and to communicate status proactively.

Technical Skills/Competencies

Required

• Firewalls and SD-WAN: Fortinet FortiGate (FortiOS) including Secure SD-WAN, IPsec hub-and-spoke and ADVPN, FortiManager, FortiAnalyzer and FortiClient EMS.
• Palo Alto Networks NGFW, Panorama (templates and device groups), GlobalProtect and PAN-OS SD-WAN, with enough depth to stabilize, document and migrate an existing estate.
• Routing and switching: BGP (including SD-WAN overlays), OSPF, static and policy routing, VLANs/trunking, spanning tree, HA/failover design, dual-ISP and LTE backup.
• Cisco Catalyst and Nexus switching, Cisco ASA, and Cisco Meraki (MX, MS, MR) managed through the Meraki Dashboard.
• VPN and remote access: site-to-site IPsec, SSL/IPsec remote access, SAML/MFA integration (Entra ID, Okta, Duo), certificate/PKI management.
• WAN and carrier services: Metro Ethernet/E-LAN, MPLS, DIA, circuit diversity; working with carriers to resolve circuit and performance issues.
• Wireless: enterprise Wi-Fi design and troubleshooting (Meraki MR, Cisco 9800 WLC; FortiAP a plus).
• Strong troubleshooting with packet captures, flow analysis and monitoring tools (LogicMonitor or similar).

Preferred/Strongly Desired

• SASE/cloud-delivered networking: FortiSASE, Cisco Umbrella/Secure Access, and Microsoft Security Service Edge.
• Application delivery: Kemp LoadMaster and/or F5 (VIPs, SSL certificates, migrations between platforms).
• Cloud networking: Oracle Cloud Infrastructure (OCI) and Microsoft Azure (VNets, VPN gateways, FortiGate-VM / virtual NGFWs).
• Data center networking (Cisco Nexus 5K/9K) and data center vacate/consolidation projects.
• OT/industrial network segmentation (IEC 62443 zones and conduits, industrial DMZ) for manufacturing environments.
• Healthcare (HIPAA) and life-sciences/regulated environment experience.
• Familiarity with Network Access Control (FortiNAC, Cisco ISE) and network automation/scripting (Python, Ansible, FortiManager/Meraki APIs).
• Experience with ConnectWise, LogicMonitor and Passportal (or similar PSA/RMM/documentation tools).

Certifications

Fortinet NSE 4 (FortiGate) required within 6 months of hire; NSE 6/7 Secure Networking (SD-WAN or Architect) preferred. Equivalent legacy Fortinet FCP/FCSS certifications accepted.

Cisco CCNP Enterprise (or higher) preferred; CCIE a plus.

Palo Alto Networks PCNSE preferred.

Microsoft Azure AZ-700 (Network Engineer) or OCI networking certification a plus.

Attaining and maintaining relevant technical certifications may be required for continued employment.

Other Requirements: This individual will be subject to a pre-hire background screening and reference check process. As someone who may be involved in delivering Professional Services project work, individuals in this role may be subject to additional background screening as required by client contracts. Such screenings may include drug tests.

Shift + Availability: Your normal workweek will be Monday through Friday, with hours to be agreed upon based on Company needs. Managed Solution operates in Pacific Time Zone, though some scheduling flexibility may be offered for employees in other regions. Managed Solution operates a 24x7x365 business, and, in this position, you will be required to perform work outside of normal business hours (including weekends and nights) as needed to support our clients and teams. This role requires availability for after-hours maintenance windows and on-call escalation in support of Managed Solution's 24x7 operations.

Work Location/Hybrid Status: This position will default to remote work, within a state where Managed Solution has payroll operations, though onsite presence for client-site work will likely be required (travel up to 25%). Your presence at our company headquarters in San Diego, CA; at meetings/conferences/off-site events; at client locations; or elsewhere, may be required on occasion.

Physical Requirements

Ability to safely and successfully perform the essential job functions consistent with the ADA, FMLA and other federal, state and local standards, including meeting qualitative and/or quantitative productivity standards. Ability to maintain regular, punctual attendance consistent with the ADA, FMLA and other federal, state and local standards. The essential functions of this job require: the ability to frequently sit and stand for long periods of time; to manipulate objects with fine and gross motor skills; to lift and carry network equipment up to 50 lbs. and work in data center and network closet environments; to communicate in written and spoken English; to hear; to utilize close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

Managed Solution is an equal opportunity employer and will consider qualified applicants who can perform the essential functions of the job, with or without reasonable accommodation.

E-Verify Participation

Federal law requires all employers to verify the identity and employment eligibility of all persons hired to work in the United States. Managed Solution participates in the federal E-Verify program to validate the authenticity of work eligibility documents. As part of this program, Managed Solution will provide the Social Security Administration (SSA) and, if necessary, the Department of Homeland Security (DHS), with information from each new employee’s Form I-9 to confirm work authorization. For more information, see https://www.uscis.gov/e-verify.

Compensation & Benefits*

Base Wage Range: $165,000 to $195,000 per year (Biweekly payroll)

Managed Solution considers a range of factors when determining an appropriate wage. Such factors include but are not limited to: years of related experience, industry knowledge, formal education, relevant certifications, and geographic location. Candidates should note that it is not typical for new hires to enter a position at the highest end of a position’s pay range. Wages are paid as earned and in accordance with Company policies.

Additional Perks

• PTO – earn 80 hours lump sum year 1; 15 days accrued throughout year 2; and 20 days accrued throughout years 3+
• 40 hours of Sick Time per calendar year
• 401k – Eligibility after 90 days; Managed Solution matches 50% of your first 6% in contributions, starting after 90 days
• Holidays – Managed Solution celebrates 7 paid holidays each year
• Plus, 1 Floating Holiday per Year… and 2 After 5 Years of Service!
• Medical, Dental, Vision – including two medical plans witha$0cost for employee-only coverage tiers!
• Optional Flexible Spending Account for eligible Health Care or Dependent Care costs
• Telemedicine options: “see” a medical provider from anywhere, over the phone, 24/7
• $100K Life/AD&D policy provided for all employees, free of charge!
• Employee Assistance Program – free financial consultation; counseling services; 24/7 traveler’s assistance; and more!

$80/Month Cell Phone + Internet Reimbursement

*All Company compensation and benefits programs are subject to Company policy and plan documents and are subject to change at Company’s sole discretion. Some programs may differ based on eligibility/availability/regulations in an employee's home state or locale.

Why our employees love working here

We believe our strength comes from our differences, and we are committed to fostering and promoting a culture of inclusion. We believe our team and our community are our greatest assets and we strive to promote both. From providing our employees the time to pursue Microsoft certifications, to supporting and partnering with multiple non-profit organizations, we believe this is where healthy and happy employees thrive.

As we grow, we are anchored and driven by our Core Values: I <3 IT!

Integrity – We demonstrate consistent, trustworthy behavior. We are honest with everyone, take ownership (even in the face of failure), and do the right thing... even when no one is looking.

Heart – We show genuine care for our community, our customers, and our culture. We believe people are at the heart of IT! We are authentic, inclusive, and take time to celebrate and enjoy one another's company.

Innovation – We cultivate a diverse work environment and forward-thinking business by supporting an open exchange of ideas, driven by creativity and collaboration. We're dedicated to consistently delivering excellence through a ‘yes- to- what’s-next’ attitude.

Teamwork – We work together and support one another to achieve a clear, common goal, while taking accountability for our own contribution's and the overall team's success.

Inclusion & Equal opportunity employment

We are an equal opportunity employer committed to building a workplace where every individual is evaluated on their skills, experience, and ability to contribute — without regard to race, color, religion, national origin, age, sex, marital status, ancestry, disability, veteran status, gender identity, or sexual orientation. We believe that a team made up of varied perspectives and backgrounds makes us stronger, and we are dedicated to fostering an environment where all employees feel welcomed and valued.

If you're excited about this role but your past experience doesn't align perfectly with every qualification in the job description, we encourage you to apply anyway. You may be just the right candidate for this or other roles.

As part of our commitment to inclusion and equal opportunity, Managed Solution is committed to making the application and interview process accessible to all candidates. If you require an accommodation due to a disability, please contact us at [email protected] or 858-429-3000 (ask for Human Resources).

Application Information and Hiring Timeline

The initial application window will be through November 30. If this posting remains open beyond that date, Managed Solution may have extended the application window or may be collecting resumes for potential future openings. If you have questions regarding the status of this posting, please contact [email protected]. If you have applied previously to roles with our team but have not been selected, feel free to reapply if you remain qualified, eligible, and interested in the position outlined above.

*By submitting a resume, you agree to the terms and conditions of our Job Applicant Privacy Policy.