The Network Architect’s role is to develop, maintain, troubleshoot and optimize functional and secure networks and network connections to ensure high levels of availability and security of the supported systems and business applications. The Network Architect will play a key role in the design, build, and ongoing support of the firm’s functional networks (LAN, WLAN, WAN), and configuration and installation of SD-WAN, firewalls, routers and other network devices to support the secure operation and expansion of the firm’s networking infrastructure. Monitoring and optimizing network performance, integrity and security as well as resolution of network support and performance issues of the firm’s cloud and local networking infrastructure are also within scope for this role.

This individual requires an extensive background and in-depth technical knowledge of communication protocols (e.g., TCP/IP) and routing protocols (BGP) and solid background in network administration and architecture. Familiarity with access control models and network security required, along with experience with network diagnostic, monitoring and analysis tools. In addition, desired individual will possess experience to support networking elements of VMware Virtual Center (VCenter) management platform.

Duties and Responsibilities:

Configure, maintain, and troubleshoot firewall policies and rules.
Be the subject matter expert in network design, solution engineering, managing/maintaining, and overseeing the implementation and delivery of redundant, secure, and high-performing network systems, infrastructure, and related technologies.
Participate as a point of escalation in day-to-day operations and troubleshooting efforts, working with internal partners such as the Application, Cyber, and Service Desk teams.
Review and establish documentation and procedural standards, ensuring these standards are met and documentation is maintained.
Provide expertise and guidance to junior team members and assist in their professional development.
Conduct regular security assessments and recommend improvements.
Perform network monitoring, incident response, and security investigations.
Monitor and manage the device lifecycle, including firmware maintenance, of all routers, switches, and wireless infrastructure.
Work with the Network Infrastructure team to implement solutions by participating in strategy discussions, providing feedback on designs, and suggesting opportunities for continuous improvement through day-to-day involvement in operations.
Additional job duties may be assigned as needed to meet the needs of the business and support our values.
Uphold high standards of confidentiality, discretion, and integrity, particularly with respect to all sensitive and/or confidential firm and client information to which this position will have access.

Qualifications:

At least 10 years of experience working with complex networking environments.
Strong communication skills.
Experience with planning, building, and maintaining critical network architectures (WAN, LAN, VPN, VoIP, Collaboration, Security, and Wireless).
Solid technical foundation in Cisco networking (CCNA/CCNP/CCIE level equivalent).
Experience with Meraki Enterprise wireless network design
Expertise with software-defined networking and Palo Alto's Prisma SD-WAN.
Expertise with complex routing and switching using BGP.
Experience with Palo Alto Prisma VPN.
Knowledge in the areas of fault monitoring, capacity management, configuration management, and performance management.
Experience with network management and monitoring tools such as Cisco DNA and Panorama.
Experience with cloud technologies, including cloud-based firewalls, proxies, and related technologies (particularly in Azure).
Strong experience with Cisco and Palo Alto technologies.
Innovative Thinking: Ability to think outside the box and propose creative solutions to complex network challenges.
Advanced Network Security Expertise: Deep understanding and hands-on experience with network security protocols and best practices.
Cloud Networking: Strong knowledge of cloud networking solutions and experience integrating on-premises and cloud networks.
Leadership and Mentorship: Proven ability to lead and mentor technical teams, fostering a collaborative and growth-oriented environment.
Project Management: Strong project management skills, with the ability to manage multiple projects simultaneously and deliver on time.
Adaptability: Ability to quickly adapt to new technologies and changing business requirements.

Skills & Expectations:

Demonstrated ability to serve as a change agent, leading and inspiring others to act, especially under circumstances when change is unpopular.
Ability to establish rapport and elicit cooperation from personnel across all levels, including executive management, and cross-functional leadership.
Ability to develop and motivate technology teams, inclusive of staff, and 3rd party vendors/consultants.
Skilled in communications to all levels in the organization in writing, speaking, and presentation skills for work with the Firm leadership, the user community, and clients.
Excellent problem solving and debugging skills required.
Ability to oversee complex information systems and collaborate with technical teams.
Must be able to reliably deal with multiple competing priorities and remain calm under pressure
Ability to fulfill on-call duties for IT emergencies outside of Firm business hours.

Status: Exempt

Reports To: Director of IT Infrastructure Solutions

Workplace Type: Remote

Salary range: $120,000- $196,000 dependent on experience level and location/geography.

Position requires access to equipment, software, or technology that is subject to U.S. export controls. To be granted access pursuant to US Export Control laws, candidate must be either (a) a United States citizen or national; (b) a person lawfully admitted for permanent residence of the United States (i.e., “Green Card” holder); or (c) an INS-approved refugee or asylum holder who has applied for naturalization within six months of the date the individual first became eligible; and if not yet naturalized, is still actively pursuing naturalization if 2 years have passed since the date of application to be granted access pursuant to US Export Control laws. Candidates will be required to submit appropriate documentation to determine whether access can be granted before proceeding further through the application process.

Covington & Burling LLP is an equal opportunity employer and does not discriminate in any aspect of employment, including hiring, salary, promotion, discipline, termination, and benefits, on the basis of race, color, ethnicity, religion, national origin, gender, gender identity or expression, age, marital status, sexual orientation, family responsibility, disability (including physical handicap), or any other improper criterion.

Covington & Burling LLP jobs

Network Architect