> Markdown version of [/jobs/ext/2996684-network-architect](https://www.wearedevelopers.com/jobs/ext/2996684-network-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Architect - **Company:** CareerCircle - **Location:** Norfolk, VA, United States - **Experience:** Expert - **Salary:** $116,350.0 - $210,325.0 - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, Access Control List, Artificial Intelligence, Amazon Web Services, Apple IOS, Application Layers, Systems Engineering, User Authentication, Microsoft Azure, Border Gateway Protocol, Synchronous Optical Networking, Cisco Unified Communications Manager, Network Operating System (NOS), Cisco IOS, Cloud Computing, Cloud Engineering, Configuration Management, CompTIA Security+, Cyber Security, Computer Networks, Wavelength-Division Multiplexing, Data Centers, Ethernet, Enhanced Interior Gateway Routing Protocol, Identity and Access Management, IP Addressing, Internet Protocol, Internet Protocol Security (IP SEC), IPv4, IPv6, Internetworking, IP Address Management, IP Multicasting, Virtual Private Networks (VPN), Multi-protocol Systems, Information Systems Security Architecture Professional, Junos, Python (Programming Language), Key Management, Network Security, Network Troubleshooting, Network Layer, Windows Servers, Network Configuration and Change Management, NetFlow, Network Architecture, Network Diagrams, Network Planning and Design, Wireless Security, Network Monitoring, Routing, Network Segmentation, Open Shortest Path First (OSPF), Peering, Public Key Infrastructure, Remote Access Technology, Ansible, Zero Trust Network Access, Simple Network Management Protocols, Software Engineering, Systems Architecture, Tcpdump, Wireshark, VMware VSphere, Wide Area Networks, Wireless Networks, Network Switches, Network Routing, Identity Services Engine, Network Access Control, Load Balancing, Cloud Platform System, Computer Network Technologies, Firewalls (Computer Science), Infrastructure as Code (IaC), Juniper, SC Clearance, Infrastructure Automation Frameworks, Information Technology, SDN Network, Virtualization Security, Open Network Automation Platform, Cisco, Plan of Action and Milestones, Vulnerability Analysis - **Published:** September 19, 2026 - **Apply:** https://www.careercircle.com/jobs/all/all/usa/va/hampton/c897d2c8-1a1d-45ba-9356-66d363391902 ## About the Role IPv4 Ansible Planning Firewall Equities Operations Leadership Automation Resilience Encryption Market Data NIST 800-53 Coordinating Data Centers Cloud Design IP Addressing Cyber Security Microsoft Azure Network Routing IP Multicasting Network Diagrams Routing Protocols Wide Area Networks Policy Enforcement Scalability Design Transport Services Network Automation Perimeter Security Workflow Management Amazon Web Services Network Engineering Technical Authority EVPN (Ethernet VPN) Top Secret Clearance Network Segmentation Network Architecture IT Capacity Management Network Infrastructure Cross-Domain Solutions Border Gateway Protocol Configuration Management Network Planning And Design IAT Level III Certification Infrastructure as Code (IaC) Juniper Network Technologies Multiprotocol Label Switching Security Requirements Analysis VxLAN (Virtual Extensible LAN) Software Development Life Cycle Open Shortest Path First (OSPF) Secure Remote Password Protocols Network Quality Of Service (QoS) Cisco Certified Network Professional Plan Of Action And Milestones (POA&M) High Assurance Internet Protocols Encryptor CompTIA Advanced Security Practitioner (CASP+) Certified Information Systems Security Professional Enterprise Mission Assurance Support Service (eMASS) Software-Defined Networking Wide Area Network (SD-WAN) Cisco Certified Network Professional (CCNP) Enterprise Juniper Network Certified Internet Professional (JNCIP) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance), * Clearance: US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date. * Education: Bachelor's degree with 12+ years of experience or a Master's degree with 10+ years of experience. Additional experience may be considered in lieu of a degree. * Certifications: DoD 8570/8140 IAT Level III certification (e.g., CISSP, CompTIA SecurityX/CASP+ CE) and a professional-level networking certification (e.g., Cisco CCNP Enterprise, Juniper JNCIP). * Experience: 12-15 years of progressive network engineering experience, including at least 5 years in a network architecture or senior design role supporting DoD environments. * Technical Expertise: + Expert-level knowledge of routing and switching, including BGP, OSPF, IS-IS, MPLS/L3VPN, IP multicast, and QoS design. + Proven experience architecting data center fabrics (e.g., VXLAN/EVPN, spine-leaf) and enterprise campus and WAN topologies. + Hands-on design experience with next-generation firewalls, network segmentation, and secure remote access architectures. + Working knowledge of Type 1 encryption (HAIPE/TACLANE) and classified network enclaves. + Strong understanding of dual-stack IPv4/IPv6 design and enterprise IP address management. * Compliance Knowledge: In-depth familiarity with RMF, NIST SP 800-53, DISA Network Infrastructure STIGs, and the DoD Zero Trust Reference Architecture. * Documentation: Demonstrated ability to produce high-level and low-level designs, network diagrams, and architecture artifacts suitable for ATO packages and design reviews. Preferred Qualification: * Clearance: US Citizen with an active TS/SCI * Expert Certification: Cisco CCNP, or Juniper JNCIP. * SD-WAN & Cloud: Design experience with SD-WAN and hybrid connectivity to AWS GovCloud, Azure Government, or classified cloud environments. * Network Automation: Proficiency with Ansible workflows for network configuration. * Enterprise Programs: Familiarity with DISN transport services, Joint Regional Security Stacks (JRSS), CSfC, or cross-domain solution (CDS) architectures. * Tactical Networks: Experience designing deployable, disconnected, or low-bandwidth tactical network architectures., Market Data Coordinating IP Addressing ANSYS Meshing Change Control Trend Analysis Key Management Network Routing Carrier Ethernet Operating Systems CompTIA Security+ Wireless Security Autonomous System Routing Protocols Physical Topology Wide Area Networks Nodes (Networking) Network Encryption Compliance Auditing Traffic Engineering EVPN (Ethernet VPN) Top Secret Clearance Border Gateway Protocol Configuration Management IAT Level II Certification IAT Level III Certification Assessment And Authorization Juniper Network Technologies Python (Programming Language) Multiprotocol Label Switching Peering (Computer Networking) Virtual Private Networks (VPN) Synchronous Optical Networking Open Shortest Path First (OSPF) Network Quality Of Service (QoS) Wavelength-Division Multiplexing Troubleshooting (Problem Solving) Simple Network Management Protocols Plan Of Action And Milestones (POA&M) Juniper Networks Certified Internet Expert Enhanced Interior Gateway Routing Protocols High Assurance Internet Protocols Encryptor CompTIA Advanced Security Practitioner (CASP+) Certified Information Systems Security Professional Cisco Certified Network Professional (CCNP) Enterprise Juniper Network Certified Internet Professional (JNCIP) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) Cisco Certified Internetwork Expert (CCIE) Enterprise Infrastructure +0, Hardening Operations Management IEEE 802.1X Communication Presentations Network Layer Cyber Security VMware VSphere Load Balancing Virtualization Security Tools Authentications Network Routing Network Switches Secret Clearance Incident Response Wireless Networks Business Valuation Application Layers Network Monitoring Network Engineering Access Control List Network Segmentation System Administration Full Stack Development Vulnerability Scanning Network Access Control Artificial Intelligence Technical Documentation Network Troubleshooting Business Transformation Configuration Management Public Key Infrastructure Juniper Network Technologies Virtual Private Networks (VPN) Identity And Access Management Troubleshooting (Problem Solving) Internet Protocol Security (IP SEC) Cisco Identity Services Engine (ISE) Advanced Cardiovascular Life Support (ACLS) Certification +0 ## Description The Defense Sector at Leidos is seeking a highly experienced Network Architect to lead the design and modernization of enterprise network infrastructure across Department of War networks. This individual will serve as the senior technical authority for network architecture - translating mission requirements into secure, resilient, and scalable designs spanning WAN, campus, data center, and tactical edge environments. The Network Architect will drive Zero Trust alignment, guide engineering teams through implementation, and ensure every design meets DISA, RMF, and program security requirements from concept through operations., * Develop target-state network architectures and multi-year modernization roadmaps aligned with mission, program, and DoD enterprise objectives. * Produce high-level and low-level designs for WAN, campus, data center, and cloud-connected environments, including routing policy, segmentation, and redundancy models. * Architect Zero Trust network capabilities, including micro-segmentation, software-defined perimeter, and policy enforcement points aligned with DoD ZT pillars. * Design secure interconnections between classification levels and mission partners, coordinating Type 1 encryption and boundary protection requirements. Security & Compliance * Ensure all designs incorporate DISA STIG, SRG, and RMF control requirements from inception, and support ISSMs/ISSOs with architecture artifacts for eMASS and ATO submissions. * Evaluate architectural risk, define compensating controls, and support Plans of Action and Milestones (POA&M) remediation at the design level. * Align boundary and connection designs with DISA Connection Approval Process (CAP) and cybersecurity service provider (CSSP) requirements. Technical Leadership & Governance * Serve as the senior technical authority and escalation point for network engineering, operations, and NOC/SOC teams. * Lead architecture and design reviews, present recommendations to government leadership, and brief Configuration Control Board (CCB) decisions. * Establish and maintain network design standards, reference architectures, and naming and addressing conventions. * Mentor senior and mid-level engineers and provide technical oversight during implementation and cutover activities. Lifecycle & Modernization * Conduct technology assessments, Analyses of Alternatives (AoA), and proof-of-concept evaluations for emerging network capabilities. * Drive hardware and software lifecycle planning, including end-of-life replacement, capacity planning, and performance baselining. * Champion network automation and infrastructure-as-code practices to improve consistency, compliance, and deployment speed., Firewall Operations Innovation Coordinating Professionalism Windows Servers Network Routing Network Testing Network Switches Network Security Operating Systems Technical Support CompTIA Security+ Systems Engineering Engineering Support Network Engineering Systems Architecture Information Assurance Information Technology Technical Documentation Technical Presentations Configuration Management Standard Operating Procedure Juniper Network Technologies Network Operating System (NOS) Troubleshooting (Problem Solving) Cisco Certified Network Associate Host Based Security System (HBSS) Cisco Unified Communications Manager Certified Information Systems Security Professional Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) +0 Google IT Support Network Engineer - WAN - 2nd Shift Leidos Hampton, VA*On-Site IPv6 IPv4 Junos Ansible Tooling NetFlow Tcpdump Damping Equities Apple IOS Wireshark Cisco IOS Operations Mitigation ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [IoT: The road to sustainability](https://www.wearedevelopers.com/videos/557-iot-the-road-to-sustainability) - [IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod](https://www.wearedevelopers.com/videos/1413-ip-authentication-a-tale-of-performance-pitfalls-and-challenges-in-prod) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Top Must-Visit Developer Conferences in the US in 2026](https://www.wearedevelopers.com/magazine/679-top-must-visit-developer-conferences-in-the-us-in-2026) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)