Enterprise Network Architect

An architecture role with a consultative mandate — you design large-scale network and data centre solutions, present them to the customer, and retain ownership through delivery.

Prague, hybrid, on site with customers at least twice a week. Permanent or contract; full-time or reduced capacity. 160 000–200 000 CZK/month + company car. Start ASAP.

I'm interested

Job Type

Permanent
Contract

Job type

Full time

Salary

160.000 - 200.000 CZK

Location

Hlavní město Praha
Hybrid

ID

STQ_533_JOB


About our client

An international technology group with more than 30 years in the market, 800+ professionals, and a presence across several countries in Central and Eastern Europe. It delivers projects in IT infrastructure, data centres, cloud, cybersecurity and IT outsourcing for customers ranging from banking and public administration to European enterprise organisations.

Why This Role Exists Now:
Regulatory pressure, NIS2 in particular, is pushing organisations toward segmented, auditable networks. Microsegmentation and identity-based access are becoming baseline requirements, and the volume of enterprise network engagements has grown accordingly.

That architecture layer is currently covered on an ad hoc basis — by the presales team or by drawing on capacity from elsewhere in the group. The company is building a permanent capability instead.

Job description

Role / Mission:
You own the architecture of enterprise network and data centre solutions for large customers — from initial concept through customer-facing validation to oversight during implementation.

You work alongside the internal presales team, and when a design change becomes necessary during implementation, you adapt the concept rather than handing it off.

Within twelve months, the expectation is a set of delivered engagements, established relationships with the customers you have worked with, and a working model with presales that moves designs into delivery without unnecessary iteration.

Key Responsibilities:
- Design and optimise enterprise networks — LAN, WAN and SD-WAN — for large-scale customer environments
- Present and defend technical solutions directly to customers in consultative settings
- Work with presales and sales on accounts you subsequently deliver
- Govern design changes during implementation, maintaining the integrity of the original concept
- Coordinate with service providers on configuration standards; review Bill of Materials and assess solution sizing

What This Role Is NOT:
- Not an implementation role — configuration delivery sits with the engineering team
- Not a hand-off model — architectural ownership continues into implementation, not concluding at design sign-off
- Not a back-office technical function — customer-facing consultation is central to the role, not adjacent to it

Operating Model:
Prague-based, hybrid. On-site presence with customers at least twice a week; the majority of the customer base is in and around Prague. More time in the office during onboarding, with greater flexibility thereafter. English at B2/C1 for the international team; Czech or Slovak for day-to-day work. Direct report: Head of Network & Security division.

Options:
The engagement model is open to discussion:
- Permanent employment - 160 000-200 000 CZK/month with a company car
- Contract (self-employed) - day rate up to 11 000 CZK, agreed individually
- Reduced capacity - four days per week is acceptable under either model for the right profile

Requirements

What Matters Most:
- CCNP Enterprise Architecture or equivalent - certification at architectural, not implementation, level
- Minimum 5 years in enterprise network design - demonstrable experience across switching, routing, microsegmentation and security
- Software-defined networking and automation - conceptual command is required; hands-on implementation is not
- Consultative capability - the ability to present and defend a design to a customer stakeholder is a condition of the role, not an advantage

English at B2/C1 for the international team; Czech or Slovak for day-to-day work.

Nice to Have:
- CCNP Data Center or CCNP Security
- Cloud or multi-cloud experience
- TOGAF or ArchiMate
- Practical involvement in lab work or proof-of-concept builds

These describe the working context, not selection criteria.

Offer & Terms

- 160 000–200 000 CZK/month with a company car (permanent track)
- Contract engagement available at an individually agreed day rate; four days per week possible
- Company laptop and phone, Multisport card, employer pension contribution
- Language training, hardware/software allowance, additional days off
- Financial contributions for life events; company and team events
- Certification support — Cisco CCNP track, with a vendor training budget

More information

Interested? Apply or reach out — no CV needed, your LinkedIn and a few lines is enough. We reply to everyone within two business days.
| linkedin.com/in/jirisoljak

You will speak directly with a senior IT recruiter with a hands-on technical background — a relevant conversation without the HR fluff.

Process:
- A short introductory call, 15 to 30 minutes
- A maximum of two rounds — where there is a clear fit, a decision can follow the first
- An in-person meeting precedes the final decision
- You always know where you stand

Open only to candidates eligible to work in the EU without visa sponsorship, residing in the Czech Republic long-term, with proficiency in Czech or Slovak. The contract track additionally requires a registered EU freelance or business licence.

I'm interested

Similar jobs


Network Security Engineer (Fortinet)

Location

Hlavní město Praha
Hybrid

Job Type

Permanent
Contract

Field

Networks / Security

Salary

100.000 - 120.000 CZK

International technology group with 30+ years in the market, 800+ professionals, and offices across Central and Eastern Europe. They deliver projects in IT infrastructure, data centres, cloud solutions, and cybersecurity. The company is growing — new projects, new clients, expanding demand. The Network & Security division runs a team of 20 engineers across Cisco, Checkpoint, Palo Alto, and Fortinet. Fortinet projects are picking up and the team needs someone who can take that capability to the next level. This is a place where you build and implement, not just operate. WHY THIS ROLE EXISTS NOW: The company is growing and Fortinet projects are expanding. The team currently has two mid-level Fortinet engineers — they need an L3 who can own the capability, drive delivery, and set standards. There's a clear gap: strong demand from clients, growing project pipeline, but no senior Fortinet specialist to lead it.What Matters Most: — Fortinet hands-on — strong experience with FortiGate, NGFW, VPN, IPS. Fortinet is the primary vendor here, not one of many — Minimum 5 years in network security — design, implementation, service. Not just monitoring — Client-facing communication — you can present solutions, consult, and defend a proposal. This is non-negotiable — Security concepts — NGFW, NAC, SASE, SD-WAN, WAF. You understand them, not just list them Fluent Czech or Slovak required. English at a level where you can handle a normal working discussion. Nice to Have: — Experience with Cisco or Palo Alto (the team works with these vendors too) — FCP, CCNP, or PCNSE certification — Cloud deployments (AWS/Azure) and IaaC principles — Python for automation — University degree These are nice to have — not hard filters.Role / Mission: You're coming in as the strongest Fortinet person on the team. The team is a mix of juniors, mids, and seniors across platforms — right now there are two people working with Fortinet at a mid level. You're L3, the one who drives it forward. You design solutions for clients, you're the technical authority in presentations and consultations, and you pull the heavier delivery. After 12 months, this is what good looks like: a stabilised Fortinet practice in the team, completed projects, and clients who know you by name. For a top profile, there's a natural path toward technical leadership of the Fortinet part — but first and foremost, they need someone who's strong technically and can communicate. Key Responsibilities: — You design, implement, and service network security solutions — primarily Fortinet (FortiGate, FortiManager, FortiAnalyzer) — You're the L3 escalation point for the team — you handle what others can't yet — You communicate directly with clients — technical presentations, consultations, solution proposals — You work with presales and sales — you help sell what you'll then build — You contribute to cloud-based Fortinet deployments (AWS/Azure) — You share know-how with the team — you set standards and help juniors and mids grow What This Role Is NOT: — Not pure operations — you won't spend your days on tickets and routine maintenance — Not a management role — you don't formally manage people, but you lead them technically — Not isolated work — without client and team communication, this doesn't work Operating Model: Prague-based, remote-friendly. More time in the office during onboarding. After that, remote is possible — but you're expected at the office or client sites as needed. Most of the business is in and around Prague, so a reasonable commute matters. Permanent contract preferred, freelance possible for the right profile. Standard L3 on-call rotation within the team. Czech or Slovak proficiency required. Direct report: Head of Network & Security division.Interested? Apply or get in touch: | linkedin.com/in/jirisoljak No CV needed — a LinkedIn profile and a few sentences about yourself is enough. You'll speak directly with a senior IT recruiter with hands-on IT background — 450+ hires. A relevant conversation without the HR fluff. Process: — Short intro call (15–30 min) — Maximum 2 rounds — if there's a fit, a decision can come after the first one — In-person meeting before the final decision — You'll know where you stand at every step EU work authorization required. No visa sponsorship.

Security Operations Center Analyst

Location

Hlavní město Praha

Job Type

Permanent
Contract

Field

Networks / Security

Salary

50.000-80.000 CZK

Česká firma působící v oblasti kyberbezpečnosti, která více než dekádu poskytuje služby zákazníkům z privátního i státního sektoru. Pokrývá celé spektrum – od implementace technologií po provoz a rozvoj bezpečnostních služeb. Tým specialistů napříč oblastmi SIEM, SOAR, EDR/XDR, network visibility, threat hunting a vulnerability managementu, přičemž využívají technologie jako IBM QRadar, Elastic Stack, SentinelOne a Fortinet. Bezpečnostní model jejich služeb je postavený na kombinaci Threat Intel, Purple Teamingu a proaktivního vyhledávání hrozeb. Projekty běží pro enterprise zákazníky i organizace kritické infrastruktury.• Zkušenost s prací v oblasti bezpečnostního monitoringu nebo SOC • Orientace v principech logování a analýze událostí z OS, sítí a aplikací • Znalost alespoň některých technologií: SIEM, EDR, IDS/IPS, firewally, antimalware • Základní přehled o IT infrastruktuře – sítě, operační systémy, servery, databáze, cloud • Schopnost vyhodnotit relevantnost alertu a sepsat souvislý záznam • Zájem o oblast kybernetické bezpečnosti a chuť učit se • Analytické uvažování, pozornost k detailu, systematičnost • Angličtina na úrovni práce s technickou dokumentací• Monitoring a analýza bezpečnostních událostí z nástrojů typu SIEM, EDR, IDS/IPS • Eskalace, kategorizace a dokumentace incidentů podle definovaných playbooků a procesů • Vyhodnocení alertů, prvotní analýza a triáž incidentů • Spolupráce s kolegy v oblasti threat huntingu a incident response • Identifikace anomálií, podezřelých vzorců a záznamů v logovacích datech • Příprava podkladů pro forenzní analýzu nebo eskalaci na L2/L3 úroveň • Aktivní podíl na zlepšování detection pravidel a postupů

IT jobs