Computer Network Architect Internship Jobs in Atlanta, GA

Job Summary:
APCO Holdings is a company that partners with dealerships across North America to provide innovative vehicle protection products and services. The Sr. Network Engineer & Connectivity Architect will serve as the principal architect for the organization's connectivity platform, focusing on designing and operating a secure, cloud-aligned network architecture that leverages identity-driven access and modern networking principles.
Responsibilities:
• Design and implement a network architecture where identity is the primary control plane.
• Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions.
• Architect And Support Enterprise-scale Hybrid Identity Environments, Including Active Directory design (sites, replication, GPO strategy).
• Entra Connect (Azure AD Connect) synchronization.
• Authentication protocols (Kerberos, NTLM, modern authentication).
• Secure integration with cloud and network services.
• Design, Implement, And Optimize Conditional Access Policies, Including MFA enforcement strategies.
• Device compliance (Intune integration).
• Risk-based and session-based access controls.
• Location-aware and Zero Trust access models.
• Lead the implementation of a Zero Trust architecture by aligning: Identity (Entra ID / Active Directory / Okta), Network (Azure, Meraki), Endpoint (Intune / device posture).
• Ensure consistent enforcement of least privilege access across all environments.
• Ensure Secure, High-performance Access To Microsoft 365 By Aligning identity policies with network routing and access controls.
• Supporting modern authentication flows and token-based access.
• Optimizing Teams, Exchange, and SharePoint connectivity.
• Design And Implement Scalable Azure Networking Solutions, Including Virtual Networks (VNet) and Hub-and-Spoke architectures.
• Private Endpoints and Private Link.
• Azure Firewall, NSGs, and routing strategies.
• DNS architecture and name resolution.
• Lead the design, deployment, and optimization of Cisco Meraki environments, including MX (SD-WAN & security appliances), MS (switching), MR (wireless), Auto VPN and centralized cloud-based management.
• Architect And Manage Secure Connectivity Between Environments Using ExpressRoute, VPN Gateways, Meraki SD-WAN (Auto VPN).
• Ensure low latency, high availability, and seamless failover.
• Manage Network And Cloud Configurations As Code Using Terraform, Bicep, or ARM templates.
• Ensure all deployments are standardized, repeatable, and auditable.
• Implement Monitoring And Telemetry Across Azure And Meraki Using Azure Monitor & Log Analytics, Meraki Dashboard, Observability tools (Dynatrace, Splunk, etc.).
• Enable proactive detection, anomaly identification, and automated remediation.
• Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments: Eliminate single points of failure, Implement redundancy across WAN, LAN, wireless, and cloud, Design for automated failover and rapid recovery, Ensure identity-dependent services remain available during outages.
• Establish And Enforce Governance Using Azure Policy and tagging standards, Policy-as-Code frameworks, Identity governance (access reviews, RBAC, least privilege).
• Ensure compliance with security, regulatory, and enterprise standards.
Qualifications:
Required:
• Bachelor’s degree in Computer Science, Information Technology, or a related technical field; Master’s degree in Information Systems Management preferred.
• In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects.
• 8-10+ years of enterprise networking experience
• 5+ years of Active Directory experience (enterprise scale)
• 3+ years of Entra ID (Azure AD), Conditional Access, and MFA
• 3+ years of Azure networking experience
• 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless)
• Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN)
• Experience implementing IaC (Terraform, Bicep, ARM)
• Experience integrating identity with network and Zero Trust frameworks
• Proven experience leading a transition from legacy 'box-by-box' management to a centralized, API-driven orchestration model.
• Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity
• Experience implementing identity-driven access integrating network, endpoint, and SaaS
• VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design
• MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard
• Terraform, Bicep, ARM templates, CI/CD pipelines
• Identity and network dependency across Exchange, Teams, SharePoint
• Intune/device compliance integration with access policies
• Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk
• PowerShell, Python, Or Similar Scripting Experience
Preferred:
• Microsoft 365 performance and connectivity optimization
• Microsoft Certified: Azure Network Engineer Associate (AZ-700)
• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Azure Solutions Architect Expert
• Cisco Meraki Solutions Specialist (CMSS)
• Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise
• Cisco Certified DevNet Professional
• Hashi Corp Certified: Terraform Associate
• Certified Kubernetes Administrator (CKA)
Company:
APCO Holdings is a leading provider of F&I solutions, automotive protection products, and dealer services, supporting automotive, RV, marine, and powersports dealers, as well as financial institutions nationwide. Founded in 1984, the company is headquartered in Norcross, USA, with a team of 501-1000 employees. The company is currently Late Stage.