> Markdown version of [/jobs/ext/3844416-network-architect](https://www.wearedevelopers.com/jobs/ext/3844416-network-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Architect - **Company:** TEKSYSTEMS INC. - **Location:** Bethesda, MD, United States (Remote available) - **Experience:** Expert - **Salary:** $150,010.0 - **Contract:** Temporary contract - **Skills:** Microsoft Access, Cloud Engineering, CompTIA Security+, Cyber Security, Computer Networks, Information Leak Prevention, Software Design Documents, Network Topologies, Identity and Access Management, Internetworking, Virtual Private Networks (VPN), Network Security, Network Troubleshooting, Network Architecture, Network Connections, Routing, Network Segmentation, Zero Trust Network Access, Session Description Protocol, Software Technical Review, Virtual Local Area Networks, Wide Area Networks, Network Switches, Network Routing, Network Routers, Computer Networking Systems, Software Security, Firewalls (Computer Science), Information Technology, SDN Network, Low Latency, Gsuite, Cisco - **Published:** October 20, 2026 - **Apply:** https://www.careercircle.com/jobs/all/all/usa/md/bethesda/731627db-cef0-4801-86ae-233778393676 ## About the Role Firewall NIST 800 Operations Leadership Encryption Gap Analysis Group Policy Traffic Flow Communication Risk Analysis Cyber Security Access Controls Network Routing Computer Science Network Switches Technical Design Network Security Network Topology Google Workspace Cloud Management Security Controls Operating Systems CompTIA Security+ Cloud Engineering Network Discovery Knowledge Transfer Business Valuation Wide Area Networks Network Engineering Endpoint Management Enterprise Security Application Security Network Segmentation Network Architecture Architectural Design Data Loss Prevention Endpoint Engineering Information Technology Full Stack Development Network Infrastructure Reference Architecture Technical Communication Network Troubleshooting Business Transformation IT Security Architecture Stakeholder Coordination Software Technical Review Session Description Protocol Zero Trust Architecture (ZTA) Virtual Private Networks (VPN) Network Performance Management Identity And Access Management Virtual Local Area Network (VLAN) Software Defined Networking (SDN) Cisco Certified Internetwork Expert Cisco Certified Network Professional At least 10 years, zero trust, zta, network architecture, enterprise network architecture, network assessment, cisco, WAN/LAN, routing, switching, micro segmentation, identity aware security, gap analysis, network modernization, risk assessment, ccnp, ccnp certification, zero trust,zta,network architecture,enterprise network architecture,network assessment,cisco,WAN/LAN,routing,switching,micro segmentation,identity aware security,gap analysis,network modernization,risk assessment, Minimum 10 years of professional experience in enterprise network architecture, design, and engineering. Security+; Relevant industry certifications such as CCNP, CCIE, or equivalent advanced network/security credentials. Professional certification in Zero Trust Architecture i.e., Certificate of Competence in Zero Trust (CCZT) or documented leadership on at least two multi-site Zero Trust assessment/implementation projects of comparable scope. Demonstrated experience designing and assessing complex, geographically distributed enterprise networks. Strong understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation. Experience developing physical and logical network architecture diagrams and technical design documentation. Knowledge of Zero Trust Architecture principles, including micro-segmentation, least-privilege access, identity-aware security, and encrypted transport i.e. expertise with the DoD Zero Trust Strategy, DoD ZTRA, and NIST SP 800-207. Experience conducting network assessments, identifying architecture gaps, and developing modernization recommendations tied with ability to assess network performance, latency, security dependencies, and implementation risks. Strong technical communication, documentation, and stakeholder coordination skills. Ability to work collaboratively with cybersecurity, identity management, cloud engineering, and endpoint management teams. Ability to satisfy the applicable Government personnel security requirements. Preferred Qualifications The following are recommended qualifications beyond the PWS minimum requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline. Experience supporting DoD, federal civilian, or other regulated enterprise environments. Familiarity with Software-Defined Networking (SDN), Software-Defined Perimeter (SDP), and Zero Trust, Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors. ## Description We are seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize enterprise network infrastructure across five geographically distributed DoD sites. The candidate will lead network discovery, identify security and architectural gaps, and develop a future-state architecture aligned with the DoD Zero Trust Strategy, ZTRA, and NIST SP 800-207. The role requires expertise in enterprise networking, micro-segmentation, identity-aware access, and security architecture, with collaboration across cybersecurity, endpoint engineering, and Chrome Enterprise Premium (CEP) teams to enable secure, context-aware access. The candidate should be comfortable serving as the technical architecture lead while collaborating with specialized cybersecurity and Chrome Enterprise engineers responsible for implementing endpoint, browser, and application security controls. Key Responsibilities Enterprise Network Discovery and Assessment Lead technical discovery and assessment of physical and logical network architectures across five enterprise sites, evaluating routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations. Analyze network traffic flows, ingress/egress points, segmentation capabilities, and security dependencies to assess Zero Trust readiness, including micro-segmentation and software-defined networking capabilities. Identify network vulnerabilities, architectural gaps, and modernization opportunities while evaluating existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture (ZTRA). Develop comprehensive As-Is Network Topology documentation and contribute to the DoD ZTA Gap Analysis Report. Zero Trust Architecture Design Lead the development of a future-state Zero Trust Network Architecture aligned with DoD ZTRA Target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access. Evaluate modernization opportunities for legacy network infrastructure, perimeter-based security, and VPN access while maintaining or improving network performance and latency. Develop network architecture diagrams, technical specifications, and integration recommendations, identifying architectural dependencies, technical constraints, and implementation risks. Collaborate with Chrome Enterprise Premium (CEP) engineers to integrate browser-based Zero Trust access into the enterprise security architecture. Document technical justifications for ZTRA requirements deemed infeasible and recommend alternative approaches where appropriate. Security Integration and Technical Oversight of Chrome Enterprise Premium Upgrade Provide architectural guidance for transitioning legacy Group Policy Objects (GPOs) to Chrome Browser Cloud Management (CBCM), collaborating with Google Workspace/Chrome Enterprise engineers to align Context-Aware Access (CAA) policies with the target Zero Trust Architecture. Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection (ATP), CAA, and Data Loss Prevention (DLP). Support resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation to ensure security controls align with approved architectural designs. Modernization Planning and Knowledge Transfer Contribute to a prioritized, resource-estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment. This includes identifying technical dependencies, implementation priorities, and network modernization requirements. Develop supporting network architecture documentation and operational procedures and provide technical guidance and knowledge transfer to Government network engineering and cybersecurity personnel. Support operational handoff activities and long-term architectural sustainability.