What are the responsibilities and job description for the Senior Principal Cyber Security Architect Engineer (Cisco, SD-WAN, VPN) position at Detroit Engineered Products?
Position Description We are seeking a highly skilled Network Architect to lead the design and implementation of our hybrid and multi-cloud network environment. This role focuses on building a modern, scalable architecture across multiple hyperscalers in FedRamp versions including AWS, Azure, OCI, and private cloud while leveraging Cisco SD-WAN as the strategic connectivity platform. This role also requires the ability to clearly present architectural strategies and designs across the organization, communicate the business value behind technical decisions, and effectively sell and defend the proposed architecture to both technical stakeholders and executive leadership. Key Responsibilities
Design and implement hybrid and multi-cloud architectures across major hyperscalers, including virtual networks, segmentation, routing, and security controls (FedRamp).
Lead integration of Cisco SD-WAN across data centers, branch locations, and cloud environments.
Architect and optimize private and cloud connectivity including backbone routing, private circuits, VPN, and SD-WAN cloud on-ramps.
Drive multi-cloud network planning, governance, lifecycle management, and compliance (CMMC).
Enhance network security using cloud-native controls, private endpoints, segmentation, and identity-aware access.
Develop automation using Terraform, Bicep, CloudFormation, or similar IaC tools.
Improve observability using multi-cloud telemetry, flow logs, SD-WAN analytics, and SolarWinds.
Collaborate across Cloud, Security, and Infrastructure teams to enable modernization initiatives.
Architect, deploy, and maintain Cisco ACI fabrics, including tenant design, contracts, service graphs, multipod, and multisite topologies.
Design and support Layer 2 extension technologies across data centers and cloud platforms.
Lead modernization of data center network architectures, including spine leaf designs, intent-based networking, and high-availability patterns.
Define and enforce network segmentation strategies across ACI, SD-WAN, firewalls, and cloud network security groups.
Engineer and maintain load balancing strategies using A10, AVI/NSX ALB, or cloud-native load balancers for global and regional applications.
Develop and maintain network standards, reference architectures, and design patterns for on-prem, cloud, and hybrid environments.
Oversee routing design using BGP, OSPF, and EVPN across data centers, cloud edge environments, and backbone networks.
Optimize WAN architectures, QoS, traffic engineering, and application performance across diverse connectivity models.
Lead troubleshooting and root-cause analysis for complex hybrid and multi-cloud network issues.
Guide adoption of zero-trust network principles, micro-segmentation, and identity-based access for distributed applications.
Skills Required
Exceptional communication skills with ability to translate complex concepts to diverse audiences.
Excellent analytical and problem-solving capability.
Adaptability in fast-paced, multi-cloud delivery environments.
High ownership mindset and strong accountability.
Ability to collaborate across distributed, cross-functional teams.
Strong documentation discipline and architectural rigor.
Skills Preferred
Experience Required
8 years of enterprise networking experience with extensive hybrid and multi-cloud architecture knowledge.
Hands-on experience designing network architectures across multiple hyperscalers (AWS, Azure, OCI).
Strong understanding of multi-cloud routing, backbone connectivity, peering, and transit architectures.
Experience implementing hybrid connectivity using private circuits, hyperscaler backbones, VPN, and SD-WAN.
Ability to define and enforce multi-cloud governance, tagging standards, and configuration baselines.
Expertise in Cisco SD-WAN (vManage, vBond, vSmart, templates, and policy design).
Proficiency with routing protocols including BGP and OSPF.
Experience with cloud-native firewalls, segmentation, encryption, and identity-aware access.
SolarWinds or similar monitoring experience for performance visibility.
Experience designing high-availability, fault-tolerant architectures across cloud and on-prem regions.
Strong understanding of Zero Trust frameworks.
Experience Preferred
Industry certifications such as CCNP, cloud networking certifications, or Cisco SD-WAN Specialist.
Experience with SASE solutions and cloud firewall/NVA deployments.
Experience with cloud modernization and migration programs across hyperscalers.
Knowledge of DNS architectures for hybrid and multi-cloud environments.
Experience with CICD automation pipelines for network deployments.
Familiarity with Kubernetes networking across cloud providers.
Education Required
Education equivalency: 14 Years with HS, 12 Years with AA, 10 Years with BS, 8 Years with MS, 6 Years with PhD.
Design and implement hybrid and multi-cloud architectures across major hyperscalers, including virtual networks, segmentation, routing, and security controls (FedRamp).
Lead integration of Cisco SD-WAN across data centers, branch locations, and cloud environments.
Architect and optimize private and cloud connectivity including backbone routing, private circuits, VPN, and SD-WAN cloud on-ramps.
Drive multi-cloud network planning, governance, lifecycle management, and compliance (CMMC).
Enhance network security using cloud-native controls, private endpoints, segmentation, and identity-aware access.
Develop automation using Terraform, Bicep, CloudFormation, or similar IaC tools.
Improve observability using multi-cloud telemetry, flow logs, SD-WAN analytics, and SolarWinds.
Collaborate across Cloud, Security, and Infrastructure teams to enable modernization initiatives.
Architect, deploy, and maintain Cisco ACI fabrics, including tenant design, contracts, service graphs, multipod, and multisite topologies.
Design and support Layer 2 extension technologies across data centers and cloud platforms.
Lead modernization of data center network architectures, including spine leaf designs, intent-based networking, and high-availability patterns.
Define and enforce network segmentation strategies across ACI, SD-WAN, firewalls, and cloud network security groups.
Engineer and maintain load balancing strategies using A10, AVI/NSX ALB, or cloud-native load balancers for global and regional applications.
Develop and maintain network standards, reference architectures, and design patterns for on-prem, cloud, and hybrid environments.
Oversee routing design using BGP, OSPF, and EVPN across data centers, cloud edge environments, and backbone networks.
Optimize WAN architectures, QoS, traffic engineering, and application performance across diverse connectivity models.
Lead troubleshooting and root-cause analysis for complex hybrid and multi-cloud network issues.
Guide adoption of zero-trust network principles, micro-segmentation, and identity-based access for distributed applications.
Skills Required
Exceptional communication skills with ability to translate complex concepts to diverse audiences.
Excellent analytical and problem-solving capability.
Adaptability in fast-paced, multi-cloud delivery environments.
High ownership mindset and strong accountability.
Ability to collaborate across distributed, cross-functional teams.
Strong documentation discipline and architectural rigor.
Skills Preferred
Experience Required
8 years of enterprise networking experience with extensive hybrid and multi-cloud architecture knowledge.
Hands-on experience designing network architectures across multiple hyperscalers (AWS, Azure, OCI).
Strong understanding of multi-cloud routing, backbone connectivity, peering, and transit architectures.
Experience implementing hybrid connectivity using private circuits, hyperscaler backbones, VPN, and SD-WAN.
Ability to define and enforce multi-cloud governance, tagging standards, and configuration baselines.
Expertise in Cisco SD-WAN (vManage, vBond, vSmart, templates, and policy design).
Proficiency with routing protocols including BGP and OSPF.
Experience with cloud-native firewalls, segmentation, encryption, and identity-aware access.
SolarWinds or similar monitoring experience for performance visibility.
Experience designing high-availability, fault-tolerant architectures across cloud and on-prem regions.
Strong understanding of Zero Trust frameworks.
Experience Preferred
Industry certifications such as CCNP, cloud networking certifications, or Cisco SD-WAN Specialist.
Experience with SASE solutions and cloud firewall/NVA deployments.
Experience with cloud modernization and migration programs across hyperscalers.
Knowledge of DNS architectures for hybrid and multi-cloud environments.
Experience with CICD automation pipelines for network deployments.
Familiarity with Kubernetes networking across cloud providers.
Education Required
Education equivalency: 14 Years with HS, 12 Years with AA, 10 Years with BS, 8 Years with MS, 6 Years with PhD.