About the Role
Serve as TASB's most senior individual-contributor authority on enterprise networking, owning both the architecture and hands-on engineering of a multi-entity, hybrid Azure/on-premises environment with compliance-sensitive segmentation requirements. Build and implement the multi-year network modernization roadmap, leading TASB's platform migration from Cisco to Juniper while maintaining stability of the existing Cisco environment.
Responsibilities
- Own and evolve enterprise network architecture and the multi-year technology roadmap, including platform standards, topology design, and lifecycle planning for switching, routing, and security infrastructure.
- Lead the design, planning, and execution of the Cisco-to-Juniper platform migration, including risk assessment, cutover planning, and post-migration validation.
- Collaborate with the Information Security team on network security policy, firewall rule management, and traffic flow analysis.
- Mentor supporting network staff.
- Design and implement network segmentation strategies — including trust zones, VLANs, NAC, and 802.1X to enforce security boundaries and meet entity-specific and regulatory isolation requirements.
- Perform hands-on configuration, deployment, and troubleshooting of switching, routing, and firewall infrastructure across campus, datacenter, and edge environments.
- Architect and maintain hybrid connectivity between on-premises infrastructure and Microsoft Azure, including VPN Gateway, ExpressRoute, VNets, NSGs, and multi-subscription routing.
- Serve as the escalation point for complex network incidents, performing root cause analysis and driving remediation for issues affecting production systems.
- Provide technical mentorship and day-to-day guidance to network administration staff, building team capability on current and emerging platforms.
- Develop and maintain network documentation, standards, and diagrams, ensuring architecture decisions are captured and repeatable.
- Evaluate emerging network technologies and vendor products, and recommend investments aligned to organizational strategy and budget.
- Manage network-related change control activities, including change proposals, testing, and coordination with the Change Advisory Board.
- Present architecture strategy, project status, and technology investment recommendations to IT leadership and other non-technical stakeholders.
- Participate in an on-call rotation and provide after-hours support for critical network incidents as needed.
Requirements
- Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience.
- Required certifications: JNCIP-ENT (JNCIE-ENT preferred) and CCNP Enterprise or CCIE Enterprise Infrastructure; Microsoft Certified: Azure Network Engineer Associate strongly preferred; or ability to obtain required certifications within the first 12 months of employment as a condition of employment.
- 10+ years of progressive enterprise networking experience.
- 5+ years of network architecture and design ownership; not participation, but accountable decision-making.
- Hands-on experience deploying and administering Juniper EX Series switching and SRX Series security platforms, and administering Cisco Catalyst and Nexus platforms, in a production enterprise environment.
- Experience designing and implementing network segmentation, trust zones, VLANs, NAC, and 802.1X in a multi-entity or multi-tenant environment, ideally with compliance-aware requirements such as FINRA or SOC2.
- Experience with Microsoft Azure hybrid networking in multi-subscription environments, including VPN Gateway, ExpressRoute, NSGs, and hub-spoke topologies.
- Demonstrated ability leading or executing a network platform migration in a production enterprise environment.
- Ability to operate as a senior individual contributor in a lean team.
- Ability to present architecture and investment recommendations to non-technical leadership.
- Knowledgeable in nonprofit, public sector, or multi-affiliate organizational environments.
- Any job offer is contingent upon receipt of results of a satisfactory background check.
Skills
- Juniper EX Series
- Juniper SRX Series
- Cisco Catalyst
- Cisco Nexus
- Network security policy design
- Firewall rule management
- Traffic flow analysis
- Microsoft Azure hybrid networking
- VPN Gateway
- ExpressRoute
- NSGs
- Hub-spoke topologies
- Network segmentation
- Trust zones
- VLANs
- NAC
- 802.1X
Location
- Remote
- Hybrid
Work Type
- Remote
- Hybrid
Experience Level
- Principal
- 10+ years of progressive enterprise networking experience
- 5+ years of network architecture and design ownership
Education Level
- Bachelor's degree in Information Technology, Computer Science, Engineering, or a related field, or equivalent professional experience
- JNCIP-ENT
- JNCIE-ENT
- CCNP Enterprise
- CCIE Enterprise Infrastructure
- Microsoft Certified: Azure Network Engineer Associate
Salary/Compensations
- Salary commensurate with experience
Benefits
- Competitive pay
- Rich benefit offerings
- 2:1 match of retirement contributions up to 5% after one year
- Onsite daycare
- Onsite gym
- Wellness program
- Tuition reimbursement
- Remote and hybrid work options for certain roles
- Flexible schedules
About the Company
- Established in 1949, TASB has grown alongside Texas to meet the evolving needs of the school boards it serves.
- 500 employees work together to promote educational excellence for Texas public schoolchildren.
- TASB offers high-quality services that help 1,023 school districts operate more efficiently and effectively in serving more than 5.5 million public school students statewide.
- The TASB team is adaptable and responsive to the needs of our members.
- The Texas Association of School Boards promotes educational excellence for Texas schoolchildren through the advancement of good governance, valuable learning experience for school leaders, and public school advocacy.
- We also provide high-quality services and programs to school districts – helping them operate more efficiently and effectively.
Equal Opportunity
- The Association is an equal opportunity employer and will not discriminate against an individual based on any of the following personal characteristics protected by law: race, color, national origin, religion, sex (including in relation to marital status, pregnancy, pay, sexual orientation or gender identity), age, disability, genetics or veteran status.
