Senior/Principal Network Architect

Responsibilities
Kforce has a client that is seeking a Senior/Principal Network Architect (L4-Principal) in Los Angeles, CA. Overview: We are seeking a Senior/Principal Network Architect to lead enterprise-scale network architecture and modernization initiatives. This role blends hands-on technical expertise with client-facing leadership, requiring a strong Cisco background and the ability to guide teams through design, deployment, and optimization of advanced network solutions. The ideal candidate will bring deep experience in SD-Access, identity and security integration, and multi-site enterprise routing. Responsibilities:

• Design and lead enterprise SD-Access architectures (fabric, control/edge/border, transit, segmentation, policy integration)
• Architect and implement Catalyst Center-driven automation including SDA workflows, templates, and network assurance
• Develop and deploy Cisco ISE security frameworks (802.1X, TrustSec/SGTs, BYOD/guest access, PxGrid integrations)
• Engineer secure campus and WAN environments using Cisco Firepower/FTD (NAT, VPN, IDS/IPS, HA)
• Lead SD-WAN solutions across multi-site enterprises (transport independence, DIA/Cloud onramp, policy/security integration)
• Provide advanced routing design expertise with BGP, OSPF, and EIGRP for large-scale networks
• Oversee network modernization efforts including SDA migrations, resiliency patterns, QoS, multicast, and wireless alignment
• Mentor engineering teams, review designs, and set architecture standards
• Act as a trusted advisor to stakeholders, translating business outcomes into technical roadmaps
• Contribute to architecture documentation, governance standards, and reusable templates

Requirements

• Active CCIE certification (Enterprise Infrastructure or Security strongly preferred)
• 10+ years of enterprise networking experience, with at least 3-5 years leading SD-Access architecture and deployments
• Experience designing and implementing Cisco SD-WAN solutions
• Hands-on expertise with Cisco Catalyst Center, SDA workflows, and automation
• Strong knowledge of Cisco ISE for identity and policy, and Cisco Firepower (FTD) firewalls
• Deep understanding of enterprise routing protocols (BGP, OSPF, EIGRP)
• Proven ability to lead migrations, mentor engineers, and present to executive-level stakeholders

Preferred Qualifications

• CCDE or multiple CCIE certifications
• Experience with automation tools (Python, Ansible, Terraform, APIs)
• Wireless networking (Catalyst 9800, assurance), QoS, multicast, NAC posture
• Cloud networking (AWS, Azure) and hybrid connectivity
• Familiarity with data center interconnect (ACI concepts)

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in Kforce's sole discretion unless and until paid and may be modified in its discretion consistent with the law.

This job is not eligible for bonuses, incentives or commissions.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

By clicking "Apply Today" you agree to receive calls, AI-generated calls, text messages or emails from Kforce and its affiliates, and service providers. Note that if you choose to communicate with Kforce via text messaging the frequency may vary, and message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You will always have the right to cease communicating via text by using key words such as STOP.