Network Security Architect

We’re looking for a Network Security Architect who can design modern, secure solutions from the ground up. You’ll own the security architecture across our clients’ networks - translating business and mission requirements into resilient, defensible designs built on zero-trust principles, cloud-native security, and current best practices. This is a senior, hands-on architecture role for someone who loves solving hard security problems and building things the right way.

You’ll work remotely from anywhere in the U.S., collaborating with engineering teams, client stakeholders, and program leadership. Up to 10% travel is required for client sites and project needs.

What You’ll Do

• Design secure network and system architectures for on-premises, cloud, and hybrid environments.
• Architect zero-trust solutions - identity-centric access, microsegmentation, and least-privilege by default.
• Design and guide implementation of firewalls, IDS/IPS, VPN/SASE, secure remote access, and network segmentation.
• Build cloud security architectures in AWS and/or Azure (secure landing zones, network security groups, encryption, monitoring).
• Develop security reference architectures, standards, and documentation (diagrams, as-builts, design docs).
• Assess existing environments, identify risks and gaps, and produce clear, prioritized remediation roadmaps.
• Partner with engineering and operations teams to ensure designs are implemented to spec and to standard.
• Support compliance efforts and align architectures to recognized frameworks (e.g., NIST 800-53, RMF, CIS, Zero Trust Architecture / NIST 800-207).
• Serve as the security design authority and technical advisor to clients and internal teams.

What You’ll Bring

Note: Must be authorized to work in the United States and able to obtain a Public Trust security clearance., * Proven experience as a security or network architect, designing secure solutions across networks, cloud, and hybrid environments.

• Deep knowledge of network security: firewalls, segmentation, IDS/IPS, VPN, SASE/SSE, TLS/PKI, and secure network design.
• Strong understanding of zero-trust architecture and modern identity and access concepts.
• Hands-on experience securing cloud environments (AWS and/or Azure).
• Familiarity with security frameworks and controls (NIST, CIS, RMF, or similar).
• Excellent documentation and communication skills - able to explain complex designs to both engineers and non-technical stakeholders.
• Willingness to travel up to 10% for client sites and project needs.

Nice to Have

• Relevant certifications such as CISSP, CISSP-ISSAP, CCIE Security, CCNP Security, AWS Certified Security - Specialty, or Azure Security Engineer (AZ-500).
• Experience supporting federal or public-sector clients (FISMA, RMF, ATO processes).
• Experience with SIEM/SOAR, EDR/XDR, and security automation.
• Scripting or infrastructure-as-code experience (Python, Terraform, etc.).

Up to $180,000 a year - Full-time, Contract, Pulled from the full job description

• Referral program
• Professional development assistance
• 401(k)
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance, * Competitive salary up to $200,000/year, based on experience.
• Fully remote within the U.S.
• The chance to architect solutions end-to-end with real ownership and minimal bureaucracy.
• A growing, mission-focused company where senior talent is trusted to lead.
• Comprehensive benefits: medical, dental, and vision insurance; life insurance; short- and long-term disability; 401(k) with matching; and professional development assistance.

Job Types: Full-time, Contract

Pay: Up to $180,000.00 per year, * 401(k)

• 401(k) matching
• Dental insurance
• Employee assistance program
• Health insurance
• Life insurance
• Paid time off
• Professional development assistance
• Referral program
• Vision insurance