Senior Staff Network Architect, IT Infrastructure

Employee Applicant Privacy Notice Who we are: Welcoming, collaborative and having the opportunity to make an impact - is how our employees describe working here. SoFi Tech Solutions (formerly Galileo Financial Technologies) is a financial technology company that provides innovative and revolutionary software products and services that power some of the world's largest Fintechs. We are the only payments innovator that applies tech and engineering capabilities to empower Fintechs and financial institutions to unleash their full creativity to achieve their most inspired goals. SoFi Tech Solutions leads its industry with superior fraud detection, security, decision-making analytics and regulatory compliance functionality combined with customized, responsive and flexible programs to accelerate the success of all payments companies and solve tomorrow's payments challenges today. We hire energetic and creative employees while providing them the opportunity to excel in their careers and make a difference for our clients. Learn more about us and why we work here at https://tech.sofi.com/careers/.

Who we are:

Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation fintech company using innovative, mobile-first technology to help our millions of members reach their goals. The industry is going through an unprecedented transformation, and we’re at the forefront. We’re proud to come to work every day knowing that what we do has a direct impact on people’s lives, with our core values guiding us every step of the way. Join us to invest in yourself, your career, and the financial world.

The role:

As Network Architect, you will own the design for SoFi's corporate network across offices, data centers, the cloud and remote access. You will set standards, lead key initiatives from design through rollout, and work with Network Operations, SRE, Cloud Engineering and Cybersecurity. Together you'll make sure the network is secure, resilient and ready for audits in a regulated financial-services setting.

What you’ll do:

• Own the target architecture for the corporate network across offices, colocation data centers and corporate AWS. Maintain reference designs, standards and the roadmap.
• Design hybrid cloud connectivity: AWS Transit Gateway, Direct Connect, site-to-site IPsec/BGP, PrivateLink and AWS Network Firewall.
• Evolve the office "café model": a wireless-first design with dual diverse ISP paths, redundant security edges, stacked Cisco Catalyst 9300 switching and Aruba Wi-Fi 6E (AP-635, Aruba Central). The target is 99.99% monthly uptime per site.
• Drive the modernization roadmap: 802.1X/NAC, out-of-band management, end-to-end QoS/DSCP, segmentation and microsegmentation, throughput baselines, and NetFlow-based analytics.
• Set DNS and traffic standards: Route 53 private DNS and resolvers, Cloudflare public DNS/WAF/CDN, and AWS load balancing patterns.
• Make the network observable: define monitoring, alerting and telemetry standards in Datadog, SNMP and NetFlow, kept in sync with the ServiceNow CMDB.
• Partner on security and compliance: work with Cybersecurity on Palo Alto Panorama and Zscaler policy, segmentation, and audit evidence for SOX, PCI and banking regulator requirements.
• Shape the operating model: help define a hybrid managed-service (NaaS) approach. Evaluate vendors and integrators, and own the architecture decisions while partners handle execution.
• Create reusable playbooks for new offices, office refreshes and migrations. Mentor engineers and review designs and changes.

What you’ll need:

• 10+ years in enterprise networking, including 3+ years in an architect or senior lead role.
• Education & Minimum Experience Requirements: Bachelor’s Degree OR Master’s Degree in Computer Science, Information Technology, Engineering, or a related field.
• Deep knowledge of routing and switching (BGP, OSPF, VLANs, LACP, stacking) and IPsec. Hands-on experience with Cisco Catalyst or Meraki.
• Experience designing and running SASE/SSE or zero trust platforms. Zscaler (ZIA, ZPA, Branch Connector, Zero Trust Branch) is strongly preferred.
• Experience with next-generation firewalls, ideally Palo Alto Networks (PA-series, Panorama, GlobalProtect).
• Proven AWS networking skills: VPC design, Transit Gateway, Direct Connect, Route 53, NLB/ALB and Network Firewall.
• Experience designing enterprise wireless, ideally Aruba/HPE Wi-Fi 6/6E, including site surveys and heat mapping.
• Familiarity with identity-aware networking (Okta, AD, 802.1X/NAC).
• A track record of delivering multi-site network changes with minimal disruption.
• Clear written communication: architecture docs, decision records and briefings for leadership.

Nice to have:

• Experience at a bank, fintech or other regulated company (SOX, PCI DSS, FFIEC).
• Experience with Cloudflare (DNS, WAF, mTLS), Aviatrix, or AWS WorkSpaces/VDI networking.
• Network automation and infrastructure-as-code skills (Python, Terraform, Ansible, APIs).
• Experience with Datadog Network Monitoring and NetFlow analytics.
• Certifications such as CCNP/CCIE, PCNSE, Zscaler ZDTA/ZDTE, or AWS Advanced Networking Specialty.
• International site experience (LATAM, APAC).

Compensation and Benefits The base pay range for this role is listed below. Final base pay offer will be determined based on individual factors such as the candidate’s experience, skills, and location.

This role may also be eligible for a bonus and/or long term incentives. Your recruiter will provide more information to you. All roles are eligible for competitive benefits. More information about our employee benefits can be found in the link below.

Benefits To view all of our comprehensive and competitive benefits, visit our Benefits at SoFi & Galileo page!

US-Based Base Compensation $163,200—$280,500 USD

SoFi Tech Solutions provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion (including religious dress and grooming practices), sex (including pregnancy, childbirth and related medical conditions, breastfeeding, and conditions related to breastfeeding), gender, gender identity, gender expression, national origin, ancestry, age (40 or over), physical or medical disability, medical condition, marital status, registered domestic partner status, sexual orientation, genetic information, military and/or veteran status, or any other basis prohibited by applicable state or federal law. The Company hires the best qualified candidate for the job, without regard to protected characteristics. Pursuant to the San Francisco Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. New York applicants: Notice of Employee Rights SoFi Tech Solutions is committed to an inclusive culture. As part of this commitment, SoFi Tech Solutions offers reasonable accommodations to candidates with physical or mental disabilities. If you need accommodations to participate in the job application or interview process, please let your recruiter know or email [email protected]. We are unable to accommodate remote work from Hawaii, Alaska or Puerto Rico at this time. Internal Employees If you are a current employee, do not apply here - please navigate to our Internal Job Board in Greenhouse to apply to our open roles.