{"id":692663,"url":"https://alion.io/job/apcoholdings-sr-network-engineer-connectivity-architect","title":"Sr. Network Engineer & Connectivity Architect","company":{"id":668975,"name":"APCO Holdings","domain":"apcoholdings.com","url":"https://alion.io/company/apcoholdings","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":{"grade":"C","score":60,"open_postings":15,"ghost_share":0.667,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Networking","role_family":"Networking","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Ponte Vedra Beach, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":115000,"max_usd":231000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":134},"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AIOps","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bicep","optional":false},{"name":"CI/CD","optional":false},{"name":"DNS","optional":false},{"name":"Dynatrace","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Self-Healing","optional":false},{"name":"SharePoint","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"VPN","optional":false},{"name":"Zero Trust","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-04-23T19:31:58Z","employer_posted_date":"2026-04-23","last_verified_at":"2026-10-21T22:09:01Z","board_verified":true,"closed_at":null,"days_open":181,"trust":{"level":"ghost","repost_count":0,"flags":["stale","company_stale"],"days_open":180},"description":"The Sr. Network Engineer & Connectivity Architect serves as the principal architect of the organization’s enterprise connectivity platform (“The Backbone”), with a primary focus on Microsoft Azure networking, Cisco Meraki infrastructure, and identity-driven access (Active Directory & Entra ID).\nThis role is responsible for designing and operating a secure, highly resilient, and cloud-aligned network architecture, where access decisions are governed by user identity, device posture, and real-time risk signals, rather than traditional network boundaries.\nLeveraging Infrastructure as Code (IaC), AIOps, and Zero Trust principles, this position ensures seamless, secure connectivity across Azure, on-prem environments, branch networks (Meraki), and SaaS platforms such as Microsoft 365, while enabling a scalable, automated, and self-healing infrastructure.\nKey Responsibilities\nIdentity-Driven Network Architecture (CORE)\nDesign and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions.\nActive Directory & Hybrid Identity Ownership\nArchitect and support enterprise-scale hybrid identity environments, including: \nActive Directory design (sites, replication, GPO strategy) \nEntra Connect (Azure AD Connect) synchronization \nAuthentication protocols (Kerberos, NTLM, modern authentication) \nSecure integration with cloud and network services \nEntra ID & Conditional Access Engineering\nDesign, implement, and optimize Conditional Access policies, including: \nMFA enforcement strategies \nDevice compliance (Intune integration) \nRisk-based and session-based access controls \nLocation-aware and Zero Trust access models \nZero Trust & Identity Enforcement\nLead the implementation of a Zero Trust architecture by aligning:\nIdentity (Entra ID / Active Directory / Okta) \nNetwork (Azure, Meraki) \nEndpoint (Intune / device posture) \nEnsure consistent enforcement of least privilege access across all environments\nMicrosoft 365 Identity & Access Optimization\nEnsure secure, high-performance access to Microsoft 365 by: \nAligning identity policies with network routing and access controls \nSupporting modern authentication flows and token-based access \nOptimizing Teams, Exchange, and SharePoint connectivity \nAzure-Centric Network Architecture\nDesign and implement scalable Azure networking solutions, including: \nVirtual Networks (VNet) and Hub-and-Spoke architectures \nPrivate Endpoints and Private Link \nAzure Firewall, NSGs, and routing strategies \nDNS architecture and name resolution \nMeraki Network Design & Operations\nLead the design, deployment, and optimization of Cisco Meraki environments, including: \nMX (SD-WAN & security appliances) \nMS (switching) \nMR (wireless) \nAuto VPN and centralized cloud-based management \nHybrid Connectivity & Interconnects\nArchitect and manage secure connectivity between environments using: \nExpressRoute \nVPN Gateways \nMeraki SD-WAN (Auto VPN) \nEnsure low latency, high availability, and seamless failover. \nInfrastructure as Code (IaC) & Automation\nManage network and cloud configurations as code using: \nTerraform, Bicep, or ARM templates \nCI/CD pipelines (Azure DevOps, GitHub Actions) \nEnsure all deployments are standardized, repeatable, and auditable. \nAI Ops & Observability\nImplement monitoring and telemetry across Azure and Meraki using: \nAzure Monitor & Log Analytics \nMeraki Dashboard \nObservability tools (Dynatrace, Splunk, etc.) \nEnable proactive detection, anomaly identification, and automated remediation. \nResiliency & Buiness Continuity Engineering (CRITICAL)\nDesign and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: \nEliminate single points of failure \nImplement redundancy across WAN, LAN, wireless, and cloud \nDesign for automated failover and rapid recovery \nEnsure identity-dependent services remain available during outages \nGovernance & Policy Enforcement\nEstablish and enforce governance using: \nAzure Policy and tagging standards \nPolicy-as-Code frameworks \nIdentity governance (access reviews, RBAC, least privilege) \nEnsure compliance with security, regulatory, and enterprise standards. \nTechnical Expertise\n\nCategory\n\nRequirements\n\nIdentity & Access (PRIMARY)\n\nDeep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity\n\nZero Trust Architecture\n\nExperience implementing identity-driven access integrating network, endpoint, and SaaS\n\nAzure Networking (PRIMARY)\n\nVNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design\n\nMeraki (PRIMARY)\n\nMX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard\n\nAutomation & IaC\n\nTerraform, Bicep, ARM templates, CI/CD pipelines\n\nM365 Integration\n\nIdentity and network dependency across Exchange, Teams, SharePoint\n\nEndpoint Integration\n\nIntune/device compliance integration with access policies\n\nObservability\n\nAzure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk\n\nScripting & DevOps\n\nPowerShell, Python, or similar scripting experience\n\nEducation and Experience\nBachelor’s degree in Computer Science, Information Technology, or a related technical field; Master’s degree in Information Systems Management preferred. \nIn lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects.\nRequired Experience\n8-10+ years of enterprise networking experience \n5+ years of Active Directory experience (enterprise scale) \n3+ years of Entra ID (Azure AD), Conditional Access, and MFA \n3+ years of Azure networking experience \n3+ years of Cisco Meraki experience (SD-WAN, switching, wireless) \nExperience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN) \nExperience implementing IaC (Terraform, Bicep, ARM) \nExperience integrating identity with network and Zero Trust frameworks \nProven experience leading a transition from legacy \"box-by-box\" management to a centralized, API-driven orchestration model.\n Preferred Experience\nMicrosoft 365 performance and connectivity optimization \nCertifications (Preferred)\nMicrosoft Certified: Azure Network Engineer Associate (AZ-700) \nMicrosoft Certified: Identity and Access Administrator (SC-300) \nMicrosoft Certified: Azure Solutions Architect Expert \nCisco Meraki Solutions Specialist (CMSS) \nCisco Certified Internetwork Expert (CCIE) or CCNP Enterprise\nCisco Certified DevNet Professional\nHashi Corp Certified: Terraform Associate\nCertified Kubernetes Administrator (CKA)","description_format":"text","description_chars":6705,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-09-11T01:21:34Z"}],"visa":[],"liveness":{"score":8,"band":"cold","label":"Long shot","p_open":1,"p_active":0.27,"p_room":0.28,"age_days":180,"expected_fill_days":31,"reasons":["conf:2","stale_co","ghost","win:tail","crowd:"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/apcoholdings-sr-network-engineer-connectivity-architect","json_url":"https://alion.io/job/apcoholdings-sr-network-engineer-connectivity-architect.json","meta":{"generated_at":"2026-10-21T23:48:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":33976,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":668975},"rest":"https://alion.io/mcp/rest/get_company?id=668975"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fapcoholdings-sr-network-engineer-connectivity-architect"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fapcoholdings-sr-network-engineer-connectivity-architect"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fapcoholdings-sr-network-engineer-connectivity-architect"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/apcoholdings-sr-network-engineer-connectivity-architect\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fapcoholdings-sr-network-engineer-connectivity-architect"}]}