Description

Utah Transit Authority

Description

Job Summary

The Network Architect is the senior-most technical role within the Network Infrastructure group and serves as the lead authority on network architecture, design standards, and future-state planning. Under the direction of the IT Network Support Manager, this position is responsible for developing scalable, secure, and resilient network solutions across on-premises, cloud, and operational technology environments.

The Architect collaborates closely with infrastructure and security teams, cloud architects, and external vendors to ensure alignment between business needs and technical solutions. This role provides technical mentorship to Network Administrators and contributes to the development of policies, design standards, and automation strategies—but does not carry supervisory authority. Presents recommendations to the IT Network Support Manager for approvals.The Network Architect is expected to lead by influence, contribute to strategic initiatives, and act as the escalation point for the most complex network design and troubleshooting scenarios. Blends strong technical expertise with excellent communication and collaborative skills to help shape the agency's long-term network vision.

Minimum Qualifications 

EDUCATION/TRAINING

• Bachelor's degree in Computer Science, Information Systems, or a related field (Master's preferred).
• Technical certifications and relevant work experience may be considered in lieu of formal academic degrees
• Certification Preferred:
  • Cisco Certified Network Associate (CCNA) or Professional (CCNP)
  • Palo Alto Networks Certified Cybersecurity Associate (PCCSA) or similar
  • Azure Network Engineer Associate
  • Palo Alto Networks Certified Network Security Engineer (PCNSE)
  • Cisco Certified Internetwork Expert (CCIE)
  • Certified Information Systems Security Professional (CISSP)

EXPERIENCE 

• Nine (9+) years of experience in enterprise network administration, engineering, or architecture roles
• Two (2) years in a senior or lead-level capacity.
• Experience supporting LAN/WAN architecture, including routing protocols such as OSPF and BGP.
• Experience in multi-site environments and basic troubleshooting of Layer 2 and Layer 3 network issues.
• Familiarity with hybrid network environments (on-prem/cloud) and firewall platforms is preferred.
• Exposure to operational networks (OT), radio or wireless technologies is a plus, but not required.

KNOWLEDGE/SKILLS/ABILITIES:

• Enterprise Networking:
  • Solid experience with Layer 2 and Layer 3 networking, including OSPF and BGP routing protocols, and core switching concepts such as Spanning Tree.
  • Familiarity with Cisco networking platforms (e.g., IOS, Catalyst switches, Wireless Controllers).
  • Basic understanding of DHCP, DNS, and IP address management.
  • Preferred:
    • Experience with tools like Cisco ISE, Catalyst Center, and network automation platforms (e.g., Cisco ACI, Python, or SD-WAN).
    • Familiarity with hybrid infrastructure including Azure, segmented DMZs, or Operational Technology (OT) networks.
• Cloud Networking:
  • Familiarity with Azure cloud networking, including VNETs, ExpressRoute, VPN Gateways, and private endpoints.
  • Understanding of cloud-hybrid architectures and virtual network appliances like Cisco CSR 1000v and Palo Alto VM-Series firewalls.
• Firewall and Security Architecture:
  • Proficiency with Palo Alto enhanced features like App-ID, User-ID, Content-ID, and SSL decryption.
  • Experience with Panorama for centralized management and threat prevention using WildFire and DNS Security.
  • Working knowledge of NIST and CIS frameworks, including network segmentation, privileged access management (PIM), AAA, and Zero Trust security standards.
  • Layer 2 security protocols such as IP dhcp snooping, ip arp validation, and access-lists
  • Authentication, and identity management systems such as Cisco ISE, and Active directory
  • Network principles for IDS and IPS systems using tools such as Gigamon
• Network Automation
  • Knowledge of Cisco DNA automation using templates, and workflows
  • Automation Platforms such as Terra, puppet, and Chef
  • Understanding, and experience with .net, C++, and Python
• Network Performance and Monitoring:
  • Strong experience in network performance analysis and capacity planning.
  • Proficiency with monitoring tools such as SolarWinds, PRTG, WhatsUp Gold, and Azure Monitor to track latency, packet loss, and security events.
  • Logging platforms such as Logrythum, whatsup gold, and solarwinds orion.
• Collaboration and Communication:
  • Ability to communicate complex technical concepts to technical teams, non-technical stakeholders, and executive leadership.
  • Comfortable presenting design proposals, project updates, and incident reports in team meetings and cross-departmental collaborations.
• Project Management:
  • Demonstrated ability to manage network projects from concept to completion, including timeline development, resource allocation, and vendor coordination.
  • Familiarity with Agile methodologies and ITIL-based change management processes.
• Technical Documentation:
  • Skilled in creating network diagrams, standard operating procedures (SOPs), and troubleshooting guides using tools like Visio, and Lucidchart, help juice, MS SharePoint

- OR -

An equivalent combination or relevant education and experience.

Pay Rate:  $100,800 depending on experience

To be considered, apply before: Friday, January 2, 2026 by 5:59 pm 

UTA has a rich benefits package to include:

• Health, dental, vision, life/AD&D, short-term and long-term disability insurance, with Flexible Spending and Dependent Care accounts. Choice between Traditional Co-Pay or High Deductible Health Plans for medical coverage. HSA with company match available to employees enrolled in the HDHP. Benefit plans include coverage for domestic partners (eligibility affidavit required for coverage).
• Onsite Health and Wellness Clinics for medical care at no cost to employees, spouses, domestic partners, and dependent children.
• 22 days of accrued paid time off (13 vacation days and 9 sick days), which increases with tenure at UTA.
• 10 paid holidays and two paid (2) floating holidays per year.
• Retirement options - Pension Plan with 5-year vesting schedule and 457 Contribution Plan, available for immediate contributions and company matching.
• Generous tuition reimbursement for higher education, available for any higher education degree (bachelor, master, or PHD). Course of study must be approved prior to enrollment.
• Training, development, and career advancement opportunities.
• Paid parental leave for birth, adoption, and child placement (after 12 months of employment).
• Free transit passes for employees, their spouses, and their dependent children.
• Employee assistance program includes counseling, legal services, financial planning, etc.
• UTA Well a comprehensive wellness program designed to support employees and dependents in their health and wellness goals.
• Free on-site fitness facilities and discounted membership to VASA Fitness and EoS Fitness.
• Discounted cell phone plans with T-Mobile and AT&T.
• Pet insurance plan options (tailored plan coverage based on pet's health and needs).

PM21

 

Utah Transit Authority is an Equal Opportunity Employer of all persons regardless of race, color, religion, sex, national origin, age, disability, covered veterans, sexual orientation, and gender identity. Women, minorities, and people with disabilities are encouraged to apply. Applicants needing an accommodation under the Americans with Disabilities Act for any part of the application process should contact UTA Human Resources at 801-287-2324. A minimum of two work days' notice prior to the need for the accommodation is required.

Utah Transit Authority is a drug-free workplace, subject to federal drug and alcohol testing regulations under 49 CFR Part 40, 655, and 219. All offers for employment are contingent upon a successful pre-employment drug test. If a pre-employment test returns a non-negative result, an application for employment may be rejected. All employees are subject to reasonable suspicion and post-accident testing for drug and alcohol use. All safety sensitive employees are subject to random testing for drug and alcohol use.

PI281358168