Shield Network Architect responsible for defining and evolving secure, scalable, and resilient network architecture across Shield AI’s global environments. Lead network strategy, standards, and reference architectures.
Responsibilities
Shield AI is seeking a Network Architect to define and evolve the secure, scalable, and resilient network architecture supporting our engineering, manufacturing, autonomy development, and enterprise operations environments.
As part of the Cloud & Infrastructure team within Enterprise Operations, this highly technical individual contributor will establish network strategy, standards, and reference architectures across Shield AI's offices, engineering labs, manufacturing facilities, data centers, public cloud environments, and international locations. You will remain hands-on for first-of-kind, complex, and high-risk deployments while partnering closely with Engineering, Manufacturing, Infrastructure, Cloud Platform, Site Infrastructure, Facilities, and Cybersecurity teams.
Enterprise Network Architecture
Define and maintain Shield AI's enterprise network architecture, technical strategy, standards, roadmaps, and reference designs.
Architect scalable LAN, WAN, wireless, internet edge, data-center, VPN, SASE, NAC, and network security solutions across a globally distributed environment.
Develop high-level and low-level designs for new offices, engineering labs, manufacturing facilities, data centers, cloud environments, acquisitions, and site integrations.
Design resilient routing and connectivity architectures using BGP, OSPF, IPsec, private circuits, cloud interconnects, diverse internet services, and related technologies.
Establish standards for segmentation, IP addressing, naming, routing, high availability, quality of service, observability, capacity, and lifecycle management.
Lead architecture reviews, technology evaluations, proofs of concept, and design decisions for strategic network initiatives.
Manufacturing IoT and Hybrid Connectivity
Develop secure network architectures for manufacturing, IoT, industrial, engineering, lab, and operational technology environments.
Define segmentation and access patterns for manufacturing equipment, sensors, robotics, test systems, building systems, cameras, and other connected devices.
Qualification
Deep expertise in enterprise routingAdvanced knowledge of BGPBachelor's degree in Computer ScienceExperience supporting aerospaceKnowledge of CMMCExperience integrating acquisitionsExperience with network automation
Required
10+ years of progressive experience in enterprise network engineering and architecture across complex, multi-site environments.
Demonstrated experience leading network architecture from requirements and design through implementation, validation, and operational handoff.
Deep expertise in enterprise routing, switching, wireless, WAN, internet edge, VPN, network segmentation, and high-availability design.
Advanced knowledge of BGP, OSPF, VLANs, VRFs, QoS, IPsec, DNS, DHCP, NAT, route redistribution, and resilient traffic-engineering patterns.
Experience architecting networks across offices, engineering facilities, manufacturing environments, data centers, colocation facilities, and public cloud environments.
Strong experience with firewall architecture, zero-trust principles, network access control, secure remote access, and layered segmentation.
Experience with AWS and Azure networking, including transit architectures, private connectivity, cloud routing, and network security controls.
Ability to create clear architecture diagrams, reference designs, technical standards, implementation guidance, and decision documentation.
Experience evaluating network technologies, vendors, carrier services, and professional-services designs.
Demonstrated ability to lead complex technical initiatives, mentor engineers, and influence outcomes across teams without direct authority.
Strong written and verbal communication skills, including the ability to explain architecture decisions, alternatives, and risks to technical and non-technical audiences.
Bachelor's degree in Computer Science, Engineering, Information Systems, or a related discipline, or equivalent practical experience.
Preferred
Demonstrated experience designing secure IoT, Industrial IoT, operational technology, or manufacturing networks, including segmentation of production equipment, sensors, robotics, test systems, building systems, and other connected devices.
Experience applying manufacturing or OT security architecture practices such as zone-and-conduit segmentation, the Purdue model, or ISA/IEC 62443 principles.
Hands-on experience with Palo Alto Networks, Panorama, Prisma Access, Juniper, Mist, Aruba, ClearPass, or comparable enterprise platforms.
Experience designing high-density or industrial wireless networks for manufacturing, warehouse, lab, or engineering environments.
Experience supporting aerospace, defense, advanced manufacturing, government contracting, or another regulated environment.
Knowledge of CMMC, NIST 800-171, ITAR, controlled unclassified information, and network designs supporting regulated or isolated environments.
Experience integrating acquisitions, legacy environments, or international locations into global enterprise standards.
Experience with network automation, source-controlled configuration, validation testing, and infrastructure-as-code.
