Network Architect

About the role

We are seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize enterprise network infrastructure across five geographically distributed DoD sites. The candidate will lead network discovery, identify security and architectural gaps, and develop a future-state architecture aligned with the DoD Zero Trust Strategy, ZTRA, and NIST SP 800-207. The role requires expertise in enterprise networking, micro-segmentation, identity-aware access, and security architecture, with collaboration across cybersecurity, endpoint engineering, and Chrome Enterprise Premium (CEP) teams to enable secure, context-aware access. The candidate should be comfortable serving as the technical architecture lead while collaborating with specialized cybersecurity and Chrome Enterprise engineers responsible for implementing endpoint, browser, and application security controls.

Responsibilities

• Enterprise Network Discovery and Assessment: Lead technical discovery and assessment of physical and logical network architectures across five enterprise sites, evaluating routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations. Analyze network traffic flows, ingress/egress points, segmentation capabilities, and security dependencies to assess Zero Trust readiness, including micro-segmentation and software-defined networking capabilities. Identify network vulnerabilities, architectural gaps, and modernization opportunities while evaluating existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture (ZTRA). Develop comprehensive As-Is Network Topology documentation and contribute to the DoD ZTA Gap Analysis Report.
• Zero Trust Architecture Design: Lead the development of a future-state Zero Trust Network Architecture aligned with DoD ZTRA Target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access. Evaluate modernization opportunities for legacy network infrastructure, perimeter-based security, and VPN access while maintaining or improving network performance and latency. Develop network architecture diagrams, technical specifications, and integration recommendations, identifying architectural dependencies, technical constraints, and implementation risks. Collaborate with Chrome Enterprise Premium (CEP) engineers to integrate browser-based Zero Trust access into the enterprise security architecture. Document technical justifications for ZTRA requirements deemed infeasible and recommend alternative approaches where appropriate.
• Security Integration and Technical Oversight of Chrome Enterprise Premium Upgrade: Provide architectural guidance for transitioning legacy Group Policy Objects (GPOs) to Chrome Browser Cloud Management (CBCM), collaborating with Google Workspace/Chrome Enterprise engineers to align Context-Aware Access (CAA) policies with the target Zero Trust Architecture. Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection (ATP), CAA, and Data Loss Prevention (DLP). Support resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation to ensure security controls align with approved architectural designs.
• Modernization Planning and Knowledge Transfer: Contribute to a prioritized, resource-estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment. This includes identifying technical dependencies, implementation priorities, and network modernization requirements. Develop supporting network architecture documentation and operational procedures and provide technical guidance and knowledge transfer to Government network engineering and cybersecurity personnel. Support operational handoff activities and long-term architectural sustainability.

Requirements

• Minimum 10 years of professional experience in enterprise network architecture, design, and engineering.
• Security+ certification; relevant industry certifications such as CCNP, CCIE, or equivalent advanced network/security credentials.
• Professional certification in Zero Trust Architecture (e.g., Certificate of Competence in Zero Trust (CCZT)) or documented leadership on at least two multi-site Zero Trust assessment/implementation projects of comparable scope.
• Demonstrated experience designing and assessing complex, geographically distributed enterprise networks.
• Strong understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation.
• Experience developing physical and logical network architecture diagrams and technical design documentation.
• Knowledge of Zero Trust Architecture principles, including micro-segmentation, least-privilege access, identity-aware security, and encrypted transport (expertise with the DoD Zero Trust Strategy, DoD ZTRA, and NIST SP 800-207).
• Experience conducting network assessments, identifying architecture gaps, and developing modernization recommendations tied with ability to assess network performance, latency, security dependencies, and implementation risks.
• Strong technical communication, documentation, and stakeholder coordination skills.
• Ability to work collaboratively with cybersecurity, identity management, cloud engineering, and endpoint management teams.
• Ability to satisfy the applicable Government personnel security requirements.

Preferred qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline.
• Experience supporting DoD, federal civilian, or other regulated enterprise environments.
• Familiarity with Software-Defined Networking (SDN), Software-Defined Perimeter (SDP), and Zero Trust.

Skills

• zero trust, zta, network architecture, enterprise network architecture, network assessment, cisco, WAN/LAN, routing, switching, micro segmentation, identity aware security, gap analysis, network modernization, risk assessment, ccnp, ccnp certification

Pay

The pay range for this position is $72.12 - $72.12/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Benefits

• Medical, dental & vision
• Critical Illness, Accident, and Hospital
• 401(k) Retirement Plan (Pre-tax and Roth post-tax contributions available)
• Life Insurance (Voluntary Life & AD&D for the employee and dependents)
• Short and long-term disability
• Health Spending Account (HSA)
• Transportation benefits
• Employee Assistance Program
• Time Off/Leave (PTO, Vacation or Sick Leave)

Schedule

This is a Contract position based out of Bethesda, MD. This is a hybrid position in Bethesda, MD. This position is anticipated to close on Oct 30, 2026.

Experience level

Expert Level