Computer Network Architect Jobs in Atlanta, GA (NOW HIRING)

Job Summary:
APCO Holdings is a company that partners with dealerships across North America to deliver innovative vehicle protection products and services. They are seeking a Sr. Network Engineer & Connectivity Architect to design and operate a secure, highly resilient, and cloud-aligned network architecture focused on Microsoft Azure networking and Cisco Meraki infrastructure.
Responsibilities:
• Design and implement a network architecture where identity is the primary control plane. Integrate Active Directory (on-prem), Entra ID, and identity providers (Okta) with network enforcement points to enable real-time, identity-based access decisions.
• Architect and support enterprise-scale hybrid identity environments, including:
• Active Directory design (sites, replication, GPO strategy)
• Entra Connect (Azure AD Connect) synchronization
• Authentication protocols (Kerberos, NTLM, modern authentication)
• Secure integration with cloud and network services
• Design, implement, and optimize Conditional Access policies, including:
• MFA enforcement strategies
• Device compliance (Intune integration)
• Risk-based and session-based access controls
• Location-aware and Zero Trust access models
• Lead the implementation of a Zero Trust architecture by aligning:
• Identity (Entra ID / Active Directory / Okta)
• Network (Azure, Meraki)
• Endpoint (Intune / device posture)
• Ensure consistent enforcement of least privilege access across all environments.
• Ensure secure, high-performance access to Microsoft 365 by:
• Aligning identity policies with network routing and access controls
• Supporting modern authentication flows and token-based access
• Optimizing Teams, Exchange, and SharePoint connectivity
• Design and implement scalable Azure networking solutions, including:
• Virtual Networks (VNet) and Hub-and-Spoke architectures
• Private Endpoints and Private Link
• Azure Firewall, NSGs, and routing strategies
• DNS architecture and name resolution
• Lead the design, deployment, and optimization of Cisco Meraki environments, including:
• MX (SD-WAN & security appliances)
• MS (switching)
• MR (wireless)
• Auto VPN and centralized cloud-based management
• Architect and manage secure connectivity between environments using:
• ExpressRoute
• VPN Gateways
• Meraki SD-WAN (Auto VPN)
• Ensure low latency, high availability, and seamless failover.
• Manage network and cloud configurations as code using:
• Terraform, Bicep, or ARM templates
• CI/CD pipelines (Azure DevOps, GitHub Actions)
• Implement monitoring and telemetry across Azure and Meraki using:
• Azure Monitor & Log Analytics
• Meraki Dashboard
• Observability tools (Dynatrace, Splunk, etc.)
• Design and maintain a highly resilient network architecture across Azure, Meraki, on-prem, and SaaS environments:
• Eliminate single points of failure
• Implement redundancy across WAN, LAN, wireless, and cloud
• Design for automated failover and rapid recovery
• Ensure identity-dependent services remain available during outages
• Establish and enforce governance using:
• Azure Policy and tagging standards
• Policy-as-Code frameworks
• Identity governance (access reviews, RBAC, least privilege)
• Ensure compliance with security, regulatory, and enterprise standards.
Qualifications:
Required:
• Bachelor’s degree in Computer Science, Information Technology, or a related technical field; Master’s degree in Information Systems Management preferred.
• In lieu of a degree, 12+ years of enterprise-level infrastructure experience with a proven track record of delivering automation-first networking projects.
• 8–10+ years of enterprise networking experience
• 5+ years of Active Directory experience (enterprise scale)
• 3+ years of Entra ID (Azure AD), Conditional Access, and MFA
• 3+ years of Azure networking experience
• 3+ years of Cisco Meraki experience (SD-WAN, switching, wireless)
• Experience designing hybrid connectivity (ExpressRoute, VPN, SD-WAN)
• Experience implementing IaC (Terraform, Bicep, ARM)
• Experience integrating identity with network and Zero Trust frameworks
• Proven experience leading a transition from legacy 'box-by-box' management to a centralized, API-driven orchestration model.
• Deep expertise in Active Directory (architecture, GPOs, replication), Entra ID, Conditional Access, MFA, federation (SAML, OAuth, OIDC), hybrid identity
• Experience implementing identity-driven access integrating network, endpoint, and SaaS
• VNets, ExpressRoute, VPN Gateway, Azure Firewall, Private Link, DNS, Hub-Spoke design
• MX (SD-WAN), MS (switching), MR (wireless), Auto VPN, Meraki Dashboard
• Terraform, Bicep, ARM templates, CI/CD pipelines
• Identity and network dependency across Exchange, Teams, SharePoint
• Intune/device compliance integration with access policies
• Azure Monitor, Log Analytics, Meraki Dashboard, Dynatrace, Splunk
• PowerShell, Python, or similar scripting experience
Preferred:
• Microsoft 365 performance and connectivity optimization
• Microsoft Certified: Azure Network Engineer Associate (AZ-700)
• Microsoft Certified: Identity and Access Administrator (SC-300)
• Microsoft Certified: Azure Solutions Architect Expert
• Cisco Meraki Solutions Specialist (CMSS)
• Cisco Certified Internetwork Expert (CCIE) or CCNP Enterprise
• Cisco Certified DevNet Professional
• Hashi Corp Certified: Terraform Associate
• Certified Kubernetes Administrator (CKA)
Company:
APCO Holdings is a leading provider of F&I solutions, automotive protection products, and dealer services, supporting automotive, RV, marine, and powersports dealers, as well as financial institutions nationwide. Founded in 1984, the company is headquartered in Norcross, USA, with a team of 501-1000 employees. The company is currently Late Stage.