Network Architect (Cisco) || Los Angeles, CA (Remote Role)

Overview

Remote
Depends on Experience
Accepts corp to corp applications
Contract - W2
Contract - Independent
Contract - 6 month(s)
No Travel Required

Skills

Network
CISCO
CCIE
SD-WAN

Job Details

Position: Network Architect (Cisco)

Location: Los Angeles, CA (Remote Role)

Duration: 6+ Months

Interview: Video

Job Description:

Network Architect (Cisco)

While it is remote, there will be some in person so must sit in LA

Job Title: Senior/Principal Network Architect (L4 Principal) Cisco SDAccess & Enterprise Networking

Summary: We are hiring senior-level network architects (L4 through Principal) to lead design and delivery of multisite Cisco SoftwareDefined Access (SDAccess) solutions at scale. You will set architecture direction, drive complex deployments across distributed campuses, and mentor engineers while partnering closely with security and operations. The ideal candidate holds an active CCIE and demonstrates deep, handson expertise across Cisco routing/switching, Cisco Catalyst Center (formerly Cisco DNA Center), Cisco ISE, Cisco FTD firewalls, and Cisco SDWAN, with expertlevel command of BGP, EIGRP, OSPF, and related enterprise routing protocols.

What you ll do (Key Responsibilities)

  • Own endtoend SDAccess architecture for large, multisite enterprises: fabric design (control/edge/border), transit options, segmentation (SGTs/TrustSec), identity policy, and integration with WAN and data center.
  • Lead Catalyst Center driven automation : design templates, SDA workflows, network assurance, SWIM, and closedloop operations aligned to reliability/SLOs.
  • Design identitycentric security with ISE : policy sets, authorization profiles, posture, PxGrid integrations, wired/wireless 802.1X/MAB, guest/BYOD, and scalable group policies.
  • Engineer secure edge and campus perimeters : Cisco FTD/Firepower policy design, NAT, VPN, IDS/IPS, SSL decryption strategy, and high availability.
  • Architect SDWAN underlay/overlay : transport independence, applicationaware routing, DIA/Cloud onramp, security integration, and multiregion scale.
  • Expert routing at scale : BGP (policy, route reflectors, communities), OSPF, EIGRP, ECMP, redistribution strategies, route filtering, summarization, and IPv6 planning.
  • Drive modernization roadmaps : brownfield to SDA migration, hierarchical campus design, QoS, multicast, wireless controller (Catalyst 9800) alignment, and resiliency patterns.
  • Deliver handson build and escalation leadership : lab validation, pilot, phased rollout, cutover plans, MOPs, change windows, and rootcause analysis for P1/P2 incidents.
  • Mentor and uplift engineering teams: design reviews, standards, runbooks, and enablement sessions for operations and field engineers.
  • Stakeholder leadership : collaborate with security, EUC, cloud, and application teams; translate business outcomes into technical architectures and measurable milestones.
  • Documentation & governance : HLD/LLD, asbuilts, standards, security exceptions, and compliance artifacts; contribute to reference architectures and reusable templates.

Required Qualifications (MustHave)

  • Active CCIE (any track; Enterprise Infrastructure and/or Security strongly preferred).
  • 10+ years enterprise networking experience, including 3 5+ years leading SDAccess architecture and deployment across multiple sites.
  • Proven, exceptional handson skills with Cisco routing/switching and Catalyst Center (formerly Cisco DNA Center) for SDA automation and assurance.
  • Deep expertise with Cisco ISE (policy, 802.1X, SGT/TrustSec) and Cisco FTD (Firepower) firewalls (threat, access control, NAT/VPN, high availability).
  • Strong experience with Cisco SDWAN (design, policy/templating, security integration, operationalization).
  • Expertlevel knowledge of BGP, EIGRP, OSPF, redistribution, and routepolicy design for large enterprises.
  • Demonstrated success leading complex, multiphase migrations and mentoring senior engineers.

Preferred Qualifications

  • CCDE or dual CCIE; Cisco Certified Specialist certifications in SDA, ISE, or SDWAN.
  • Automation fluency (Ansible, Python, Terraform), Gitbased workflows, and API integration with Catalyst Center/ISE/FTD/SDWAN.
  • Wireless (Catalyst 9800/Prime/Catalyst Center Assurance), QoS strategy, multicast, NAC posture, and Zero Trust segmentation.
  • Cloud networking (Azure/AWS), hybrid connectivity, and DNS/DHCP/IPAM integration.
  • Familiarity with data center and campus interconnect (e.g., ACI concepts beneficial but not required).

Work Style & Travel

  • Must reside in the immediate Los Angles metro area and be able to work onsite at client site in Downtown LA.
  • Offhours change windows as needed for critical migrations.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.