Job Requirements
Bethesda, MD
Secret Polygraph not specified
Senior Level Career (10+ yrs experience)
$150,000 - $150,000
Job Description
Senior Network Architect / Lead Zero Trust Architect
Job Description-
This role leads the assessment and modernization of enterprise network infrastructure across five geographically distributed Department of Defense sites. You will serve as the technical architecture lead for Zero Trust initiatives, driving network discovery, gap analysis, and the design of a future-state architecture aligned with DoD Zero Trust Strategy, the DoD Zero Trust Reference Architecture, and NIST SP 800-207. You will collaborate closely with cybersecurity, identity management, cloud engineering, endpoint management, and Chrome Enterprise Premium teams to enable secure, context-aware access across the environment.
Responsibilities
Lead comprehensive technical discovery and assessment of physical and logical network architectures across five enterprise sites, including routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations.
Analyze network traffic flows, ingress and egress points, segmentation capabilities, and security dependencies to evaluate Zero Trust readiness, including micro-segmentation and software-defined networking capabilities.
Identify network vulnerabilities, architectural gaps, and modernization opportunities, and evaluate existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture.
Develop detailed As-Is network topology documentation and contribute to the DoD Zero Trust Architecture Gap Analysis Report.
Lead the design of a future-state Zero Trust Network Architecture aligned with DoD ZTRA target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access.
Evaluate modernization options for legacy network infrastructure, perimeter-based security models, and VPN access while maintaining or improving network performance, latency, and reliability.
Create network architecture diagrams, technical specifications, and integration recommendations, clearly identifying architectural dependencies, technical constraints, and implementation risks.
Collaborate with Chrome Enterprise Premium engineers to integrate browser-based Zero Trust access into the broader enterprise security architecture.
Document technical justifications for ZTRA requirements that are not feasible in the current environment and recommend alternative approaches where appropriate.
Provide architectural guidance for transitioning legacy Group Policy Objects to Chrome Browser Cloud Management, working with Google Workspace and Chrome Enterprise engineers to align Context-Aware Access policies with the target Zero Trust Architecture.
Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection, Context-Aware Access, and Data Loss Prevention solutions.
Support the resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation activities to ensure security controls align with approved architectural designs.
Contribute to a prioritized, resource-estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment, including identification of technical dependencies, implementation priorities, and modernization requirements.
Develop supporting network architecture documentation, operational procedures, and standards to guide implementation and ongoing operations.
Provide technical guidance and knowledge transfer to government network engineering and cybersecurity personnel, supporting operational handoff activities and long-term architectural sustainability.
Coordinate effectively with cybersecurity, identity management, cloud engineering, and endpoint management teams to ensure cohesive, end-to-end security and network design.
Communicate complex technical concepts clearly to stakeholders, documenting findings, recommendations, and design decisions in a structured and accessible manner.
Essential Skills
Minimum 10 years of professional experience in enterprise network architecture, design, and engineering.
Strong experience designing and assessing complex, geographically distributed enterprise networks.
Deep understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation.
Hands-on experience conducting network assessments, identifying architecture and security gaps, and developing modernization recommendations.
Ability to assess network performance, latency, security dependencies, and implementation risks in large-scale environments.
Proficiency in developing physical and logical network architecture diagrams and detailed technical design documentation.
Security+ certification.
Relevant advanced network or security certifications such as CCNP, CCIE, or equivalent credentials.
Professional certification in Zero Trust Architecture (for example, Certificate of Competence in Zero Trust) or documented leadership on at least two multi-site Zero Trust assessment or implementation projects of comparable scope.
Expert knowledge of Zero Trust Architecture principles, including micro-segmentation, least-privilege access, identity-aware security, and encrypted transport.
Specific expertise with the DoD Zero Trust Strategy, DoD Zero Trust Reference Architecture (ZTRA), and NIST SP 800-207.
Strong technical communication and documentation skills, with the ability to present complex architectural concepts clearly to technical and non-technical stakeholders.
Proven ability to work collaboratively with cybersecurity, identity management, cloud engineering, and endpoint management teams.
Ability to satisfy applicable government personnel security requirements, including holding an active Secret clearance.
Additional Skills and Qualifications-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline (preferred).
Experience supporting Department of Defense, federal civilian, or other regulated enterprise environments.
Familiarity with Software-Defined Networking and Software-Defined Perimeter technologies.
Experience with Zero Trust implementations and related tooling in complex enterprise environments.
Background in network assessment, gap analysis, risk assessment, and development of modernization roadmaps.
Experience creating comprehensive architecture documentation, technical design specifications, and implementation plans.
Exposure to Chrome Enterprise Premium, Chrome Browser Cloud Management, Google Workspace, Context-Aware Access, Advanced Threat Protection, and Data Loss Prevention solutions.
Strong stakeholder coordination skills, including the ability to work directly with government decision-makers and cross-functional technical teams.
Work Environment-
This is a hybrid role based in Bethesda, Maryland, with work primarily performed remotely and periodic on-site visits to the Uniformed Services University in Bethesda as needed. You will operate within a regulated Department of Defense enterprise environment, working across five geographically distributed sites. The work involves close collaboration with government network engineering and cybersecurity teams, as well as Chrome Enterprise and Google Workspace specialists. You will engage with modern enterprise networking and security technologies, including Zero Trust architectures, SDN and SDP concepts, Chrome Browser Cloud Management, Context-Aware Access, Advanced Threat Protection, and Data Loss Prevention solutions, in a professional setting that emphasizes structured documentation, technical reviews, and long-term architectural sustainability. Dress code expectations align with a typical professional and government-facing technical environment when on site.
Job Description-
This role leads the assessment and modernization of enterprise network infrastructure across five geographically distributed Department of Defense sites. You will serve as the technical architecture lead for Zero Trust initiatives, driving network discovery, gap analysis, and the design of a future-state architecture aligned with DoD Zero Trust Strategy, the DoD Zero Trust Reference Architecture, and NIST SP 800-207. You will collaborate closely with cybersecurity, identity management, cloud engineering, endpoint management, and Chrome Enterprise Premium teams to enable secure, context-aware access across the environment.
Responsibilities
Lead comprehensive technical discovery and assessment of physical and logical network architectures across five enterprise sites, including routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations.
Analyze network traffic flows, ingress and egress points, segmentation capabilities, and security dependencies to evaluate Zero Trust readiness, including micro-segmentation and software-defined networking capabilities.
Identify network vulnerabilities, architectural gaps, and modernization opportunities, and evaluate existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture.
Develop detailed As-Is network topology documentation and contribute to the DoD Zero Trust Architecture Gap Analysis Report.
Lead the design of a future-state Zero Trust Network Architecture aligned with DoD ZTRA target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access.
Evaluate modernization options for legacy network infrastructure, perimeter-based security models, and VPN access while maintaining or improving network performance, latency, and reliability.
Create network architecture diagrams, technical specifications, and integration recommendations, clearly identifying architectural dependencies, technical constraints, and implementation risks.
Collaborate with Chrome Enterprise Premium engineers to integrate browser-based Zero Trust access into the broader enterprise security architecture.
Document technical justifications for ZTRA requirements that are not feasible in the current environment and recommend alternative approaches where appropriate.
Provide architectural guidance for transitioning legacy Group Policy Objects to Chrome Browser Cloud Management, working with Google Workspace and Chrome Enterprise engineers to align Context-Aware Access policies with the target Zero Trust Architecture.
Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection, Context-Aware Access, and Data Loss Prevention solutions.
Support the resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation activities to ensure security controls align with approved architectural designs.
Contribute to a prioritized, resource-estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment, including identification of technical dependencies, implementation priorities, and modernization requirements.
Develop supporting network architecture documentation, operational procedures, and standards to guide implementation and ongoing operations.
Provide technical guidance and knowledge transfer to government network engineering and cybersecurity personnel, supporting operational handoff activities and long-term architectural sustainability.
Coordinate effectively with cybersecurity, identity management, cloud engineering, and endpoint management teams to ensure cohesive, end-to-end security and network design.
Communicate complex technical concepts clearly to stakeholders, documenting findings, recommendations, and design decisions in a structured and accessible manner.
Essential Skills
Minimum 10 years of professional experience in enterprise network architecture, design, and engineering.
Strong experience designing and assessing complex, geographically distributed enterprise networks.
Deep understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation.
Hands-on experience conducting network assessments, identifying architecture and security gaps, and developing modernization recommendations.
Ability to assess network performance, latency, security dependencies, and implementation risks in large-scale environments.
Proficiency in developing physical and logical network architecture diagrams and detailed technical design documentation.
Security+ certification.
Relevant advanced network or security certifications such as CCNP, CCIE, or equivalent credentials.
Professional certification in Zero Trust Architecture (for example, Certificate of Competence in Zero Trust) or documented leadership on at least two multi-site Zero Trust assessment or implementation projects of comparable scope.
Expert knowledge of Zero Trust Architecture principles, including micro-segmentation, least-privilege access, identity-aware security, and encrypted transport.
Specific expertise with the DoD Zero Trust Strategy, DoD Zero Trust Reference Architecture (ZTRA), and NIST SP 800-207.
Strong technical communication and documentation skills, with the ability to present complex architectural concepts clearly to technical and non-technical stakeholders.
Proven ability to work collaboratively with cybersecurity, identity management, cloud engineering, and endpoint management teams.
Ability to satisfy applicable government personnel security requirements, including holding an active Secret clearance.
Additional Skills and Qualifications-
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline (preferred).
Experience supporting Department of Defense, federal civilian, or other regulated enterprise environments.
Familiarity with Software-Defined Networking and Software-Defined Perimeter technologies.
Experience with Zero Trust implementations and related tooling in complex enterprise environments.
Background in network assessment, gap analysis, risk assessment, and development of modernization roadmaps.
Experience creating comprehensive architecture documentation, technical design specifications, and implementation plans.
Exposure to Chrome Enterprise Premium, Chrome Browser Cloud Management, Google Workspace, Context-Aware Access, Advanced Threat Protection, and Data Loss Prevention solutions.
Strong stakeholder coordination skills, including the ability to work directly with government decision-makers and cross-functional technical teams.
Work Environment-
This is a hybrid role based in Bethesda, Maryland, with work primarily performed remotely and periodic on-site visits to the Uniformed Services University in Bethesda as needed. You will operate within a regulated Department of Defense enterprise environment, working across five geographically distributed sites. The work involves close collaboration with government network engineering and cybersecurity teams, as well as Chrome Enterprise and Google Workspace specialists. You will engage with modern enterprise networking and security technologies, including Zero Trust architectures, SDN and SDP concepts, Chrome Browser Cloud Management, Context-Aware Access, Advanced Threat Protection, and Data Loss Prevention solutions, in a professional setting that emphasizes structured documentation, technical reviews, and long-term architectural sustainability. Dress code expectations align with a typical professional and government-facing technical environment when on site.
group id: 10105424
