Senior Staff Network Architect, IT Infrastructure

Who we are:

Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation fintech company using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The role:

As Network Architect, you will own the design for SoFi's corporate network across offices, data centers, the cloud and remote access. You will set standards, lead key initiatives from design through rollout, and work with Network Operations, SRE, Cloud Engineering and Cybersecurity. Together you'll make sure the network is secure, resilient and ready for audits in a regulated financial-services setting.

What you’ll do:

• Own the target architecture for the corporate network across offices, colocation data centers and corporate AWS. Maintain reference designs, standards and the roadmap.
• Design hybrid cloud connectivity: AWS Transit Gateway, Direct Connect, site-to-site IPsec/BGP, PrivateLink and AWS Network Firewall.
• Evolve the office "café model": a wireless-first design with dual diverse ISP paths, redundant security edges, stacked Cisco Catalyst 9300 switching and Aruba Wi-Fi 6E (AP-635, Aruba Central). The target is 99.99% monthly uptime per site.
• Drive the modernization roadmap: 802.1X/NAC, out-of-band management, end-to-end QoS/DSCP, segmentation and microsegmentation, throughput baselines, and NetFlow-based analytics.
• Set DNS and traffic standards: Route 53 private DNS and resolvers, Cloudflare public DNS/WAF/CDN, and AWS load balancing patterns.
• Make the network observable: define monitoring, alerting and telemetry standards in Datadog, SNMP and NetFlow, kept in sync with the ServiceNow CMDB.
• Partner on security and compliance: work with Cybersecurity on Palo Alto Panorama and Zscaler policy, segmentation, and audit evidence for SOX, PCI and banking regulator requirements.
• Shape the operating model: help define a hybrid managed-service (NaaS) approach. Evaluate vendors and integrators, and own the architecture decisions while partners handle execution.
• Create reusable playbooks for new offices, office refreshes and migrations. Mentor engineers and review designs and changes.

What you’ll need:

• 10+ years in enterprise networking, including 3+ years in an architect or senior lead role.
• Education & Minimum Experience Requirements: Bachelor’s Degree OR Master’s Degree in Computer Science, Information Technology, Engineering, or a related field.
• Deep knowledge of routing and switching (BGP, OSPF, VLANs, LACP, stacking) and IPsec. Hands-on experience with Cisco Catalyst or Meraki.
• Experience designing and running SASE/SSE or zero trust platforms. Zscaler (ZIA, ZPA, Branch Connector, Zero Trust Branch) is strongly preferred.
• Experience with next-generation firewalls, ideally Palo Alto Networks (PA-series, Panorama, GlobalProtect).
• Proven AWS networking skills: VPC design, Transit Gateway, Direct Connect, Route 53, NLB/ALB and Network Firewall.
• Experience designing enterprise wireless, ideally Aruba/HPE Wi-Fi 6/6E, including site surveys and heat mapping.
• Familiarity with identity-aware networking (Okta, AD, 802.1X/NAC).
• A track record of delivering multi-site network changes with minimal disruption.
• Clear written communication: architecture docs, decision records and briefings for leadership.

Nice to have:

• Experience at a bank, fintech or other regulated company (SOX, PCI DSS, FFIEC).
• Experience with Cloudflare (DNS, WAF, mTLS), Aviatrix, or AWS WorkSpaces/VDI networking.
• Network automation and infrastructure-as-code skills (Python, Terraform, Ansible, APIs).
• Experience with Datadog Network Monitoring and NetFlow analytics.
• Certifications such as CCNP/CCIE, PCNSE, Zscaler ZDTA/ZDTE, or AWS Advanced Networking Specialty.
• International site experience (LATAM, APAC).