Network Architect

Skill Level:

Minimum 7 years or more of Architect level networking experience (expert routing and switching)

Daily Work Hours:

8am – 5pm (40 hours per week) EST and after hours/weekends as needed.

Designated Work Location:

Primary work location is Manhattan-New York, NY. Regular travel to campuses and facilities throughout the five boroughs of New York City and Long Island is required

Candidates must be legally authorized to work in the United States.

Typical Software Used for Engagement:

Window, notepad, Cisco IOS. F5, DDI on Infoblox, Palo Alto firewalls, campuses may have Aruba, or Fortinet devices. The scope of ReIP configurations is limited to Cisco only. Campus are

to ReIP based /16 subnets provided to them.

Typical Hardware Used for Engagement:

MS windows capable Laptop (Consultant to bring own laptop. Client will provide remote access)

Mandatory Qualifications:

7+ years hands-on experience as Network Architect with:

a. Expertise in IP scheduling, Cisco network configuration. EIGRP, network configs of VoIP including QOS, spanning tree, Wi-Fi technologies, firewalls, hosts, servers and storage, NAC devices

b. Seeking an experienced consultant to provide strategic and hands-on support for a BOE/SUNY-wide Re-IP initiative, routing and switching review, and multi-cloud networking design, load balancing architecture, DDI based on Infoblox .

c. The consultant will help assess the current state environment, identify technical and operational risks, develop a target state design, and support implementation planning and execution across on-premises and cloud environments.

d. This role requires deep expertise in enterprise networking, IP addressing and segmentation, network security, load balancing, and hybrid/multi-cloud connectivity.

e. Experience in complex multi-site environments is strongly preferred.

Duties/Responsibilities:

Assess the current campus IP addressing scheme, routing design, VLANs, and dependency mapping.

Develop a Re-IP strategy and migration plan for campus networks, including academic, administrative, data center, wireless, and other specialty networks.

Identify dependencies and risks related to:

DHCP

DNS

Firewalls

NAC / 802.1X

VPN

Load balancers

Server subnets

Printers

VoIP

Building systems / IoT

Application allowlists

Design a target-state IP addressing framework with appropriate subnetting, summarization, segmentation, naming standards, and documentation.

Provide cutover sequencing, rollback planning, and risk mitigation recommendations.

Support validation of routing, reachability, application dependencies, and service continuity during and after migration.

Advise on best practices to minimize business disruption during the Re-IP effort.

Perform a detailed audit of the current-state campus and data center network environment.

Review and document:

Core, distribution, and access layer architecture

Routing protocols and route advertisements

VLAN and subnet allocation

WAN connectivity

Firewall zones and segmentation

Wireless network dependencies

High availability and resiliency design

Edge connectivity and internet ingress/egress

DNS/DHCP/IPAM practices

Operational support model and configuration consistency

Identify gaps, risks, technical debt, single points of failure, and scalability concerns.

Assess network configuration standards, documentation quality, and change control readiness.

Provide findings and recommendations aligned to enterprise networking best practices.

Deliver an audit report with priorities categorized as:

Critical

High

Medium

Low

Implement all recommended changes in a change window

Validate success in post implementation testing

Provide post change support to ensure environment stability

Assess current and future state connectivity requirements across on-premises, private hosting, and public cloud platforms.

Design or refine network architecture for hybrid/multi-cloud environments, including:

Cloud connectivity

Routing and failover

Traffic segmentation

Security zoning

East-west and north-south traffic flows

Review and recommend architecture for load balancing across cloud-hosted workloads.

Support design and evaluation of:

Local and global load balancing

Layer 4 / Layer 7 services

SSL/TLS offload…