Systems/Network Architect

Bowhead is seeking a highly skilled and cleared Systems/Network Architect to support our RDT&E (Research, Development, Test, and Evaluation) contract in Dahlgren, VA. The ideal candidate will be instrumental in the design, implementation, and management of robust network topologies, with a strong focus on modern network automation and security frameworks. This role requires deep expertise in Cisco architectures, enterprise-scale network management, and next-generation security implementations., Core Responsibilities:

• Analyze, design, and develop network architectures, including hardware/software identification, performance analysis, and network modifications.
• Manage complex routing and switching environments, including inner router configurations, BGP, route leaking, and VRF builds.
• Automate the provisioning of new switches and troubleshoot LAN automation issues.
• Assist in the configuration and troubleshooting of VMware NSX firewall policies and virtual routing.
• Identify connectivity issues spanning copper wiring, fiber path analysis, optical transceivers, and wireless devices.
• Install, maintain, and secure network devices across multiple separated network environments.
• Monitor system logs (using tools like Splunk or QRadar) to ensure optimal operating environments and proactive threat hunting.
• Manage and upgrade environmental monitoring systems (e.g., APC StruxureWare) across multiple facility locations.
• Collaborate closely with cross-functional RDT&E teams to resolve customer issues efficiently.

This position requires specialized knowledge and hands-on experience in the following strategic domains:

• Cisco Catalyst Center (C2C): Lead the deployment, management, and assurance of network infrastructure using Catalyst Center (formerly DNA Center) for automated LAN deployments, lab building, and ongoing network telemetry.
• Zero Trust (ZT) Architecture: Drive the organization's Zero Trust security model by implementing strict access controls, micro-segmentation, and continuous monitoring to ensure secure connectivity across all endpoints and environments.
• Cisco ISE (Identity Services Engine): Architect and manage Cisco ISE deployments. Responsible for creating identity groups, configuring authorization profiles, integrating with external identity stores, and maintaining server software to support seamless Zero Trust Network Access.
• Software-Defined Access (SDA): Support the rollout and administration of SDA fabrics across classified and unclassified networks to streamline network provisioning and enforce security policies.

• Eight or more (8+) years of experience in network engineering, IT, or other related fields preferred
• Must have strong troubleshooting and critical thinking skills
• Strong attention to detail, good documentation skills, ability to write clear, concise project reports
• Ability to function with minimal instruction or supervision, or as a part of larger team reporting to formal project management
• Must have a DoD 8570 Compliance (e.g., CompTIA CASP+ or Security+) required
• Must have a Cisco Certified Network Associate (CCNA) or higher Cisco certification required
• Must obtain Cisco Certified Network Professional (CCNP) within 12 months of hire date.
• Preferred VMware Certified Professional (VCP), AWS Certified Cloud Practitioner, ITIL v4.

Targeted salary range is $115,000 annually to $150,000 annually based on qualifications and experience.

Physical Demands:

• Must be able to lift up to 10-15 pounds
• Must be able to stand and walk for prolonged amounts of time
• Must be able to twist, bend and squat periodically

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret level. US Citizenship is a requirement for this contract.