No other company in our industry is supercharging the way they work and serve their clients like OneDigital. Fresh thinking has always been the core of OneDigital's vision and growth strategy. It's how we stand out in our industry, it's how we stay competitive and resilient in a changing world. Most importantly, our innovative approach is helping more people do their best work and live their best lives. Innovation fuels our employee experience by making it easier to do your best work anytime, anywhere and from any device. And our tech-based products for clients are a game changer in our industry. If you thrive on change and innovation, OneDigital is the career choice for you.
Our Newest Opportunity:
We are seeking a Cloud Network Architect to design, implement, and evolve our enterprise cloud and hybrid network infrastructure. This role is responsible for architecting secure, scalable, and highly available network solutions spanning Azure cloud environments, SD-WAN, and next-generation firewall platforms across a distributed enterprise.
The ideal candidate brings deep hands-on expertise across Microsoft Azure networking, Cisco Meraki SD-WAN, Cisco Firepower/FTD, and Palo Alto Networks firewalls, combined with the architectural vision to unify these platforms into a cohesive, secure network fabric. This is a senior technical role with broad ownership of network strategy, security architecture, and hybrid
connectivity. The position also carries a meaningful mentorship responsibility, guiding and developing junior and mid-level network engineers across the team.
Essential Duties and Responsibilities:
Design and architect Azure cloud networking solutions including VNets, NSGs, ExpressRoute, Azure Firewall, Application Gateway, and WAF
Architect and manage enterprise SD-WAN and branch connectivity using Cisco Meraki across multi-site distributed environments
Deploy and administer Cisco Firepower/FTD and Firepower Management Center (FMC) for network security enforcement
Design, configure, and manage Palo Alto Networks next-generation firewalls and Panorama for centralized policy management
Develop and maintain network reference architectures, standards documentation, and technical roadmaps
Design and implement network segmentation strategies, zone-based access policies, and Zero Trust principles using Cisco Secure Access, Umbrella, and Duo
Serve as the highest-level escalation point for complex network incidents and performance issues
Lead architecture and design reviews for major infrastructure initiatives
Mentor and coach junior and mid-level network engineers through technical guidance, config reviews, and knowledge-sharing
Drive network automation and infrastructure-as-code initiatives using tools such as Terraform, Ansible, or Python
Partner cross-functionally with cloud, security, and infrastructure teams to deliver integrated enterprise solutions
Lead platform lifecycle refresh initiatives and evaluate emerging networking technologies
Qualifications, Skills and Requirements:
10-15+ years of progressive enterprise networking experience
Deep hands-on expertise with Microsoft Azure networking - VNets, NSGs, ExpressRoute, Azure Firewall, Application Gateway, and WAF
Strong experience designing and managing Cisco Meraki SD-WAN environments at scale across multiple sites
Hands-on experience deploying and administering Cisco Firepower/FTD and Firepower Management Center (FMC)
Hands-on experience with Palo Alto Networks NGFW; Panorama centralized management experience preferred
Expert-level knowledge of routing protocols (BGP, OSPF) and L2/L3 network design
Experience implementing network segmentation, firewall rule hierarchies, and Zero Trust access models
Familiarity with Cisco Secure Access, Umbrella, and Duo for SASE/Zero Trust initiatives
Ability to design and document enterprise-grade network architectures clearly and thoroughly
Strong troubleshooting skills across complex, multi-platform hybrid environments
Experience with network automation tools such as Terraform, Ansible, or Python/Netmiko
Proven ability to mentor and develop engineering team members
Strong communication skills with the ability to present technical concepts to both technical and non-technical stakeholders
Education, Training and Experience:
Education
Bachelor's degree in Computer Science, Information Technology, Network Engineering, or a related field preferred
Equivalent combination of education and hands-on experience will be considered in lieu of a degree
Experience
10-15+ years of progressive enterprise networking experience in complex, multi-site environments
Demonstrated experience architecting and managing Microsoft Azure networking solutions in a production environment
Proven track record designing and supporting Cisco Meraki SD-WAN deployments across distributed locations
Hands-on experience administering Cisco Firepower/FTD and Palo Alto Networks firewalls in an enterprise security role
Experience leading or contributing to large-scale network modernization or cloud migration projects
Prior experience in a technical mentorship or lead engineer capacity preferred
Certifications
Cisco CCNP Enterprise or CCIE (required or strongly preferred)
Palo Alto PCNSE (required or strongly preferred)
Microsoft AZ-700 - Azure Network Engineer Associate (required)
Additional relevant certifications (Meraki CMNA, Cisco CyberOps) a plus
Training
Ongoing professional development and certification maintenance expected
Familiarity with emerging networking technologies, Zero Trust frameworks, and cloud-native networking practices
Your base pay is dependent upon your skills, education, qualifications, professional experience, and location. In addition to base pay, some roles are eligible for variable compensation, commission, and/or annual bonus based on your individual performance and/or the company's performance. We also offer eligible employees health, wellbeing, retirement, and other financial benefits, paid time off, overtime pay for non-exempt employees, and robust learning and development programs. You will receive reimbursement of job-related expenses per the company policy and may receive employee perks and discounts.
To learn more, visit: www.onedigital.com/careers
OneDigital is an equal opportunity employer. Not only as a matter of standard, but to honor and celebrate our differences. We believe that the power of ONE starts with you. We are committed to cultivating and preserving a culture that celebrates diversity, insists on equity and inclusion, and connects us. Ensuring our people feel seen, valued, respected, and supported is fundamental to our core values and business goals.
OneDigital provides equal employment opportunities to all employees and applicants for employment regardless of their: veteran status, uniformed servicemember status, race, color, religion, sex, sexual orientation, gender identity, age (40 and over), pregnancy (including childbirth, lactation and related medical conditions), national origin or ancestry, citizenship or immigration status, physical or mental disability, genetic information (including testing and characteristics) or any other category protected by federal, state or local law (collectively, "protected characteristics"). A copy of the Federal EEO poster is linked here.
Pursuant to local Fair Chance Ordinances, we will consider qualified applications with arrest or conviction records for employment. For applicable candidates, the following ordinances are linked here to inform you of your rights as an applicant:
City and County of San Francsico
City of Los Angeles
County of Los Angeles
Employment decisions shall comply with all other applicable federal, state and city/county laws prohibiting discrimination in employment. OneDigital complies with all criminal history inquiry [or 'ban the box'] laws in California, Connecticut, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New Mexico, Oregon, Rhode Island, Vermont and Washington.
In short, we believe in hiring the most qualified applicant for the position, regardless of background.
If you have questions about our hiring policies and practices, we would be happy to discuss upon receiving your application. We hope to welcome you to OneDigital and look forward to hearing from you.
OneDigital understands the immense responsibility and opportunities provided by Artificial Intelligence. We utilize advanced Artificial Intelligence [AI] technologies to enhance our recruitment process. This includes using AI to filter candidates based on their qualifications and to rediscover potential candidates from our existing applicant pool. Our AI systems help us efficiently identify the best fit for our open positions, ensuring a streamlined and effective hiring experience. However, AI does not replace the humans in our process. If you have concerns about our use of AI, you may opt out where laws allow.
Thank you for your interest in joining the OneDigital team!