-
Principal Network Architect - Cisco SD-Access…
- NTT America, Inc. (Sacramento, CA)
-
Make an impact with NTT DATA
Join a company that is pushing the boundaries of what is possible. We are renowned for our technical excellence and leading innovations, and for making a difference to our clients and society. Our workplace embraces diversity and inclusion – it’s a place where you can grow, belong and thrive.
Your day at NTT DATA
We are hiring principal-level network architects to lead design and delivery of multi-site Cisco Software-Defined Access (SD-Access) solutions at scale. You will set architecture direction, drive complex deployments across distributed campuses, and mentor engineers while partnering closely with security and operations. The ideal candidate holds an active CCIE and demonstrates deep, hands-on expertise across Cisco routing/switching, Cisco Catalyst Center (formerly Cisco DNA Center), Cisco ISE, Cisco FTD firewalls, and Cisco SD-WAN, with expert-level command of BGP, EIGRP, OSPF, and related enterprise routing protocols.
Key responsibilities:
+ Own end-to-end SD-Access architecture for large, multi-site enterprises: fabric design (control/edge/border), transit options, segmentation (SGTs/TrustSec), identity policy, and integration with WAN and data center.
+ Lead Catalyst Center–driven automation: design templates, SDA workflows, network assurance, SWIM, and closed-loop operations aligned to reliability/SLOs.
+ Design identity-centric security with ISE: policy sets, authorization profiles, posture, PxGrid integrations, wired/wireless 802.1X/MAB, guest/BYOD, and scalable group policies.
+ Engineer secure edge and campus perimeters: Cisco FTD/Firepower policy design, NAT, VPN, IDS/IPS, SSL decryption strategy, and high availability.
+ Architect SD-WAN underlay/overlay: transport independence, application-aware routing, DIA/Cloud on-ramp, security integration, and multi-region scale.
+ Expert routing at scale: BGP (policy, route reflectors, communities), OSPF, EIGRP, ECMP, redistribution strategies, route filtering, summarization, and IPv6 planning.
+ Drive modernization roadmaps: brownfield to SDA migration, hierarchical campus design, QoS, multicast, wireless controller (Catalyst 9800) alignment, and resiliency patterns.
+ Deliver hands-on build and escalation leadership: lab validation, pilot, phased rollout, cutover plans, MOPs, change windows, and root-cause analysis for P1/P2 incidents.
+ Mentor and uplift engineering teams: design reviews, standards, runbooks, and enablement sessions for operations and field engineers.
+ Stakeholder leadership: collaborate with security, EUC, cloud, and application teams; translate business outcomes into technical architectures and measurable milestones.
+ Documentation & governance: HLD/LLD, as-builts, standards, security exceptions, and compliance artifacts; contribute to reference architectures and reusable templates.
Required Qualifications (Must-Have)
+ Active CCIE (any track; Enterprise Infrastructure and/or Security strongly preferred).
+ 10+ years enterprise networking experience, including 3–5+ years leading SD-Access architecture and deployment across multiple sites.
+ Proven, exceptional hands-on skills with Cisco routing/switching and Catalyst Center (formerly Cisco DNA Center) for SDA automation and assurance.
+ Deep expertise with Cisco ISE (policy, 802.1X, SGT/TrustSec) and Cisco FTD (Firepower) firewalls (threat, access control, NAT/VPN, high availability).
+ Strong experience with Cisco SD-WAN (design, policy/templating, security integration, operationalization).
+ Expert-level knowledge of BGP, EIGRP, OSPF, redistribution, and route-policy design for large enterprises.
+ Demonstrated success leading complex, multi-phase migrations and mentoring senior engineers.
Preferred Qualifications
+ CCDE or dual CCIE; Cisco Certified Specialist certifications in SDA, ISE, or SD-WAN.
+ Automation fluency (Ansible, Python, Terraform), Git-based workflows, and API integration with Catalyst Center/ISE/FTD/SD-WAN.
+ Wireless (Catalyst 9800/Prime/Catalyst Center Assurance), QoS strategy, multicast, NAC posture, and Zero Trust segmentation.
+ Cloud networking (Azure/AWS), hybrid connectivity, and DNS/DHCP/IPAM integration.
+ Familiarity with data center and campus interconnect (e.g., ACI concepts beneficial but not required)
Work Style & Travel
+ Must reside in the immediate Los Angles metro area and be able to work onsite at client site in Downtown LA. This is not a remote role.
+ Off-hours change windows as needed for critical migrations.
Applicants must be legally authorized to work in the United States at the time of application and must not require sponsorship for employment visa status now or in the future.
Where required by law, NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this on-site role is $220,000 to $270,000 plus bonus. This range reflects the minimum and maximum target compensation for the position across all US locations. Actual compensation will depend on a number of factors, including the candidate’s actual work location, relevant experience, technical skills, and other qualifications.
This position is eligible for company benefits that will depend on the nature of the role offered. Company benefits may include medical, dental, and vision insurance, flexible spending or health savings account, life, and AD&D insurance, short-and long-term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally required benefits.
Workplace type** **:
On-site Working
About NTT DATA
NTT DATA is a $30+ billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world’s leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. Our consulting and industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is part of NTT Group, which invests over $3 billion each year in R&D.
Equal Opportunity Employer
NTT DATA is proud to be an Equal Opportunity Employer with a global culture that embraces diversity. We are committed to providing an environment free of unfair discrimination and harassment. We do not discriminate based on age, race, colour, gender, sexual orientation, religion, nationality, disability, pregnancy, marital status, veteran status, or any other protected category. Join our growing global team and accelerate your career with us. Apply today.
Third parties fraudulently posing as NTT DATA recruiters
NTT DATA recruiters will never ask job seekers or candidates for payment or banking information during the recruitment process, for any reason. Please remain vigilant of third parties who may attempt to impersonate NTT DATA recruiters—whether in writing or by phone—in order to deceptively obtain personal data or money from you. All email communications from an NTT DATA recruiter will come from an **@nttdata.com** email address. If you suspect any fraudulent activity, please contact us ([email protected]) .
-
Recent Jobs
-
Principal Network Architect - Cisco SD-Access & Enterprise Networking
- NTT America, Inc. (Sacramento, CA)
-
Segment Risk Manager
- Huntington National Bank (Charlotte, NC)
-
Executive Director Access Business Partner
- Bayer (Chicago, IL)
-
Validation Engineer
- ValSource, Inc. (Durham, NC)