Network Architect

We are seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize enterprise network infrastructure across five geographically distributed DoD sites. The candidate will lead network discovery, identify security and architectural gaps, and develop a future-state architecture aligned with the DoD Zero Trust Strategy, ZTRA, and NIST SP 800-207. The role requires expertise in enterprise networking, micro-segmentation, identity-aware access, and security architecture, with collaboration across cybersecurity, endpoint engineering, and Chrome Enterprise Premium (CEP) teams to enable secure, context-aware access.

The candidate should be comfortable serving as the technical architecture lead while collaborating with specialized cybersecurity and Chrome Enterprise engineers responsible for implementing endpoint, browser, and application security controls.

Key Responsibilities

Enterprise Network Discovery and Assessment

Lead technical discovery and assessment of physical and logical network architectures across five enterprise sites, evaluating routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations.

Analyze network traffic flows, ingress/egress points, segmentation capabilities, and security dependencies to assess Zero Trust readiness, including micro-segmentation and software-defined networking capabilities.

Identify network vulnerabilities, architectural gaps, and modernization opportunities while evaluating existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture (ZTRA).

Develop comprehensive As-Is Network Topology documentation and contribute to the DoD ZTA Gap Analysis Report.

Zero Trust Architecture Design

Lead the development of a future-state Zero Trust Network Architecture aligned with DoD ZTRA Target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access.

Evaluate modernization opportunities for legacy network infrastructure, perimeter-based security, and VPN access while maintaining or improving network performance and latency.

Develop network architecture diagrams, technical specifications, and integration recommendations, identifying architectural dependencies, technical constraints, and implementation risks.

Collaborate with Chrome Enterprise Premium (CEP) engineers to integrate browser-based Zero Trust access into the enterprise security architecture.

Document technical justifications for ZTRA requirements deemed infeasible and recommend alternative approaches where appropriate.

Security Integration and Technical Oversight of Chrome Enterprise Premium Upgrade

Provide architectural guidance for transitioning legacy Group Policy Objects (GPOs) to Chrome Browser Cloud Management (CBCM), collaborating with Google Workspace/Chrome Enterprise engineers to align Context-Aware Access (CAA) policies with the target Zero Trust Architecture. Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection (ATP), CAA, and Data Loss Prevention (DLP). Support resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation to ensure security controls align with approved architectural designs.

Modernization Planning and Knowledge Transfer

Contribute to a prioritized, resource-estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment. This includes identifying technical dependencies, implementation priorities, and network modernization requirements.

Develop supporting network architecture documentation and operational procedures and provide technical guidance and knowledge transfer to Government network engineering and cybersecurity personnel.

Support operational handoff activities and long-term architectural sustainability.

Firewall NIST 800 Operations Leadership Encryption Gap Analysis Group Policy Traffic Flow Communication Risk Analysis Cyber Security Access Controls Network Routing Computer Science Network Switches Technical Design Network Security Network Topology Google Workspace Cloud Management Security Controls Operating Systems CompTIA Security+ Cloud Engineering Network Discovery Knowledge Transfer Business Valuation Wide Area Networks Network Engineering Endpoint Management Enterprise Security Application Security Network Segmentation Network Architecture Architectural Design Data Loss Prevention Endpoint Engineering Information Technology Full Stack Development Network Infrastructure Reference Architecture Technical Communication Network Troubleshooting Business Transformation IT Security Architecture Stakeholder Coordination Software Technical Review Session Description Protocol Zero Trust Architecture (ZTA) Virtual Private Networks (VPN) Network Performance Management Identity And Access Management Virtual Local Area Network (VLAN) Software Defined Networking (SDN) Cisco Certified Internetwork Expert Cisco Certified Network Professional

At least 10 years, zero trust, zta, network architecture, enterprise network architecture, network assessment, cisco, WAN/LAN, routing, switching, micro segmentation, identity aware security, gap analysis, network modernization, risk assessment, ccnp, ccnp certification, zero trust,zta,network architecture,enterprise network architecture,network assessment,cisco,WAN/LAN,routing,switching,micro segmentation,identity aware security,gap analysis,network modernization,risk assessment, Minimum 10 years of professional experience in enterprise network architecture, design, and engineering.

Security+;

Relevant industry certifications such as CCNP, CCIE, or equivalent advanced network/security credentials.

Professional certification in Zero Trust Architecture i.e., Certificate of Competence in Zero Trust (CCZT) or documented leadership on at least two multi-site Zero Trust assessment/implementation projects of comparable scope.

Demonstrated experience designing and assessing complex, geographically distributed enterprise networks.

Strong understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation.

Experience developing physical and logical network architecture diagrams and technical design documentation.

Knowledge of Zero Trust Architecture principles, including micro-segmentation, least-privilege access, identity-aware security, and encrypted transport i.e. expertise with the DoD Zero Trust Strategy, DoD ZTRA, and NIST SP 800-207.

Experience conducting network assessments, identifying architecture gaps, and developing modernization recommendations tied with ability to assess network performance, latency, security dependencies, and implementation risks.

Strong technical communication, documentation, and stakeholder coordination skills.

Ability to work collaboratively with cybersecurity, identity management, cloud engineering, and endpoint management teams.

Ability to satisfy the applicable Government personnel security requirements.

Preferred Qualifications

The following are recommended qualifications beyond the PWS minimum requirements:

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline.

Experience supporting DoD, federal civilian, or other regulated enterprise environments.

Familiarity with Software-Defined Networking (SDN), Software-Defined Perimeter (SDP), and Zero Trust, Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

We’re partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That’s the power of true partnership. TEKsystems is an Allegis Group company., Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.