SD Wan Network Architect (25163) - BNY

Role Summary
This senior-level SD WAN Network Architect position provides architectural leadership and hands-on technical expertise in modern WAN transformation projects. The role involves designing, deploying, and transitioning enterprise networks into resilient SD WAN solutions, collaborating closely with stakeholders, implementation teams, and operations to ensure smooth integration and steady-state performance.

Responsibilities

• Develop and maintain enterprise-wide SD WAN architecture utilizing Cisco Catalyst, Juniper Mist, and Arista VeloCloud platforms.
• Lead the design and deployment of SD WAN solutions in production environments, ensuring scalability and reliability.
• Design and implement comprehensive routing and switching solutions, including BGP, OSPF, IPSec, and Quality of Service (QoS).
• Create network segmentation strategies, multi VRF designs, and policy constructs to optimize network security and performance.
• Produce high-level and low-level network design documentation, with detailed architectural decision records and design rationales.
• Develop test plans, validation procedures, and perform verification activities to ensure proper solution functionality.
• Create as-built documentation, test reports, and operational runbooks to support customer NOC handoff and ongoing maintenance.
• Manage migration activities from legacy WAN solutions such as DMVPN and MPLS to SD WAN platforms, minimizing operational disruptions.
• Integrate SD WAN architectures with next-generation firewalls, SASE, and Secure Access Service Edge (SASE) security frameworks.
• Support cloud connectivity enhancements, including implementing cloud on-ramp connections for major cloud providers.
• Serve as a senior technical resource during deployment, troubleshooting, and escalation processes to resolve complex issues efficiently.

Qualifications

• Extensive, expert-level experience in enterprise networking, with a strong foundation in routing and switching fundamentals.
• Proven experience designing and deploying BGP overlay networks, including route reflection, communities, and policy control.
• Deep working knowledge of OSPF, IPSec, and traffic engineering principles.
• Demonstrated success leading WAN transformation initiatives from design through operational transition.
• Experience working with operations teams and supporting production environments during high-impact events.
• Excellent written and verbal communication skills with the ability to articulate complex technical concepts to diverse audiences.
• Ability to lead technical teams and collaborate effectively with stakeholders across organizational levels.
• Hands-on experience with network automation and configuration management tools such as Git, Ansible, and Python.
• Knowledge of network security platforms, including next-generation firewalls and SASE-related services.
• Availability to work on-site and navigate high-pressure deployment and troubleshooting scenarios.
• In compliance with federal law, all persons hired must verify their identity and eligibility to work in the United States and complete the required employment eligibility verification form upon hire. Candidates must be legally authorized to work in the United States without employer sponsorship, now or in the future.

Publishing Pay Range: $62.56 - $68.14 hourly
• This position is based in office and requires employee to work on-site.