Enterprise Solutions Architect

CBTS serves enterprise and midmarket clients in all industries across the United States and Canada. CBTS combines deep technical expertise with a full suite of flexible technology solutions--including Application Modernization, Managed Hybrid Cloud, Cybersecurity, Unified Communications, and Infrastructure solutions. From developing and deploying modern applications and the secure, scalable platforms on which they run, to managing, monitoring, and optimizing their operations, CBTS delivers comprehensive technology solutions for its clients' transformative business initiatives. For more information, please visit www.cbts.com.

Job Purpose:

The Enterprise Solutions Architect (ESA) is a senior technical leader responsible for defining, designing, and governing enterprise‑grade network and security architectures. This role serves as a strategic advisor and design authority, translating business requirements into secure, scalable, and resilient solutions across NGFW, SD‑WAN, Routing/Switching, NaaS, and SASE domains.

The ESA operates across the full solution lifecycle, with approximately 40% focus on pre‑sales and solution shaping and 60% on architecture, delivery oversight, and enablement, ensuring solutions are both commercially viable and operationally executable.

Essential Functions:

Sales/Pre-Sales Engagement

• Review Quotes: Evaluate hardware and services being quoted to ensure solution feasibility and completeness.
• Clarify with Sales Teams: Collaborate with Sales to understand the strategic intent behind proposed solutions.
• Identify Gaps: Highlight missing components that could impact implementation and proactively address potential issues.
• Attend Pre-Sales Calls: Engage in customer discussions as opportunities approach deal closure.

Solution Design & Effort Estimation

• Architect High-Level Designs (HLDs): Develop solution architecture diagrams, migration plans, and technical documentation.
• Site specific Low-Level Diagrams (LLDs): translate approved HighLevel Designs into implementation ready technical specifications, detailing device level configurations, routing and security policies, interface mappings, dependencies, and operational parameters required for successful deployment.
• Provide Detailed Effort Estimates: Break down required work by skillset and estimated hours to guide project planning.
• Develop Statements of Work (SoWs): Define technical scope, objectives, milestones, and exclusions for project execution.

Implementation Oversight & Execution

• Lead Implementation Strategy: Guide execution teams to ensure adherence to design principles and best practices.
• Technical Leadership: Act as the primary technical resource to enable implementation engineers rather than executing all tasks directly.
• Hands-On Deployment (When Required): Engage in critical technical tasks such as deploying Hub sites or configuring dynamic routing when these are necessary to ensure project success, mitigate risks, or resolve complex technical challenges beyond standard implementation processes.
• Continuous Communication: Provide regular updates to project stakeholders, including the PMO and customers.

Documentation & Handoff

• Ensure Complete Documentation: Maintain architecture designs, configurations, and troubleshooting guides.
• Facilitate Knowledge Transfer: Conduct formal handoff sessions with Support teams for post-deployment management, including training sessions, documentation reviews, and Q&A discussions to ensure ongoing operational success.

Education:

• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

Certifications (Preferred, Not Required):

• NGFW & Network Security: Palo Alto Networks PCNSE, Cisco CCNP Security
• SD-WAN & Routing: VMware VeloCloud VCP-NV, Cisco CCNP Enterprise, Palo Alto CNSE-SDWAN
• Cloud & SASE: AWS Solutions Architect, Microsoft Certified Azure Solutions Architect, Zscaler ZCCP, FortiSASE NSE 7, Network Access Control & Zero Trust: Fortinet FortiNAC (NSE 5/6 preferred)
• Networking & Infrastructure: Cisco CCIE (Enterprise or Security), Juniper JNCIP

Relevant Work Experience:

• 8+ years of experience in enterprise networking, security, and cloud-based solutions.
• Extensive experience designing, deploying, and supporting NGFW, SD-WAN, Routing/Switching, NaaS, and SASE architectures.
• Strong background in pre-sales engagement, effort estimation, and technical leadership.
• Experience working in cross-functional teams involving Sales, PMO, and Support.

Special Knowledge, Skills, and Abilities:

• Technical Expertise: Deep understanding of NGFW, SD-WAN, Routing/Switching, NaaS, and SASE.
• Solution Architecture: Strong ability to develop HLDs, migration plans, and Statements of Work.
• Pre-Sales & Customer Engagement: Strong communication skills to collaborate with Sales and customers.
• Leadership & Enablement: Ability to guide implementation teams and ensure project success.
• Documentation & Process Adherence: Experience with technical documentation standards and best practices.

Performance Metrics:

• Solution Quality: Deliver solutions that align with the industry best practices and organizational standards that lead to successful implementation.
• Communication Effectiveness: Clearly articulate technical concepts to Sales, PMO, Support, and Customers.
• Team Enablement: Ensure successful execution by guiding and mentoring implementation resources.
• Project Timeliness: Meet deadlines and deliverables while ensuring quality and completeness.

Why Join Our Team?

This role offers the opportunity to work at the intersection of technical expertise and strategic leadership, influencing high-impact projects while engaging directly with customers and stakeholders. You will be a trusted advisor and leader, shaping enterprise network and security solutions that drive business success.

Salary 120,000-160,000

Due to U.S. Government requirements applicable to foreign-owned telecommunications providers, non-US citizens may be required to submit to an extensive government agency background check which will necessitate disclosure of sensitive Personally Identifiable Information.