Arraya Solutions, a leading Mid-Atlantic technology consulting firm, is looking for a Network Engineer to join our team!
We are a culture that embraces change, values family and are actively involved with the community. Our team consists of people with positive attitudes who are interested in growing their knowledge around technology and leaders that are heavily involved in day-to-day activities.
***PLEASE NOTE THIS POSITION WILL BE HYBRID 3 DAYS PER WEEK***
Job Overview
Our Client is seeking a Principal Network Engineer to serve as the senior-most networking subject matter expert within the organization. This is a high-impact, lead-level individual contributor role responsible for enterprise network architecture, cloud networking strategy, and network security design.
This individual will play a key role in shaping and modernizing the company’s core networking, SD-WAN, and security posture. The role requires balanced expertise across core networking, and security engineering, with a strong emphasis on BGP routing, IP strategy, segmentation, and firewall architecture.
This position requires strong cultural alignment, executive communication skills, and the ability to operate as a technical leader without direct reports.
Key Responsibilities
Enterprise Network Engineering & Architecture
- Design, implement, and support enterprise network infrastructure across core, WAN, wireless, and multi-site environments.
- Lead BGP-based IP migration initiatives and support cleanup/optimization of 550+ public IP addresses.
- Architect and maintain routing and switching environments (Cisco Nexus core, Catalyst, Meraki).
- Design and govern firewall policies across Cisco Firepower and Meraki platforms.
- Implement VLAN segmentation, ACLs, and zero-trust network design principles.
- Serve as senior escalation point for complex networking and security issues.
Ideal Candidate Profile
- This role is best suited for a senior-level network engineer who thrives in a highly visible, strategic position. The ideal candidate is a hands-on architect with deep core networking expertise, strong cloud networking capabilities, and a security-first mindset. They must be comfortable wearing multiple hats while helping shape the long-term networking roadmap for the organization.
Preferred
- Experience with Cisco ISE.
- IPAM implementation experience.
- Infrastructure automation exposure.
- Relevant certifications (CCNP/CCIE preferred but not required).
- Bachelor’s degree preferred (not required).
Qualifications
- 10+ years of experience in enterprise network engineering.
- Advanced expertise in BGP, routing/switching, and WAN architecture.
- Strong experience with firewall technologies and network segmentation.
- Experience implementing or supporting SD-WAN solutions.
- Multi-site enterprise networking experience.
- Ability to operate as a senior technical leader without direct reports.
Vendor & Circuit ManagementSecurity & Network SegmentationWireless & Connectivity StrategySD-WAN & Software
- Oversee provisioning and lifecycle management of ISP circuits.
- Manage relationships with telecom vendors and service providers.
- Support multi-site connectivity initiatives.
- Implement and maintain zero-trust principles, segmentation, and policy enforcement.
- Support EGIRP routing protocols, BGP, route-switch architecture, and secure connectivity design.
- Exposure to Cisco ISE is a plus.
- Provide architectural guidance for enterprise wireless environments, including Meraki-based deployments.
- Define long-term wireless and connectivity strategy across distributed sites (50–60 circuits).
- Contribute to broader SD-networking modernization efforts.
- Support disaster recovery and network resiliency initiatives.
- Participate in future IPAM implementation and network automation improvements.
- Design and support hybrid cloud connectivity in Azure (primary) with future multi-cloud expansion.
- Architect and manage VNets/VPCs, routing tables, ExpressRoute/VPN connectivity, network security controls, and cloud segmentation.
- Partner with security engineering and infrastructure teams to ensure secure cloud integration.