Senior Network Architect

This position supports a mission-critical federal program focused on enterprise IT portfolio rationalization, modernization, and governance within a federal agency’s Office of the Chief Information Officer (OCIO). Our team discovers, documents, and rationalizes a large and complex enterprise IT estate - spanning networks, infrastructure, applications, data, and identity - to establish an authoritative baseline and chart a clear path toward a consolidated, well-governed target state. We seek professionals who are not only technically proficient but also adaptable, analytical, and dedicated to excellence, ensuring that we continue to provide our clients with the best expertise available., The Senior Network Architect serves as the authoritative technical lead for understanding, documenting, and rationalizing the enterprise network. This role reads device configurations, routing tables, and live traffic fluently and translates them into a trusted snapshot of how the network is actually built. The Senior Network Architect develops the authoritative topology and segmentation model that downstream security, cloud, data, and consolidation decisions depend on, partnering closely with the broader architecture team to align the network baseline with the program’s modernization and Zero Trust objectives., This is a full-time, onsite role based in Washington, D.C., requiring availability during normal business hours, with occasional night and weekend work as needed based on program demands. The Senior Network Architect works closely with executive leadership and cross-functional engineering teams across security, cloud, identity, data, and enterprise architecture, and supports governance processes and milestone reviews throughout the program., * Discover and document the enterprise network, including device configurations, routing tables, and Layer 2 / Layer 3 adjacencies (ARP, CDP/LLDP, BGP/OSPF)

• Develop and maintain the authoritative network topology and segmentation model for the enterprise
• Map WAN, SD-WAN, VPN, and site-to-site connectivity against the as-built environment
• Reconcile network findings against the configuration management inventory; identify configuration drift, undocumented and shadow links, and dead routes
• Translate discovery into a clear, trusted network baseline that informs rationalization and modernization decisions
• Partner with security, cloud, identity, data, and enterprise architecture teams to ensure the network picture supports Zero Trust and consolidation objectives
• Develop target-state network design recommendations, including segmentation, resilience, and modernization options
• Produce professional-grade architecture artifacts, diagrams, and documentation
• Support governance processes, technical reviews, and milestone gates, and brief findings to leadership and federal stakeholders
• Identify opportunities for optimization and continuous improvement in partnership with the broader team

Do you have experience in VLAN?, Do you have a Bachelor’s degree?, Education & Certification

• Bachelor’s degree in Computer Science, Information Technology, Network Engineering, or a related field preferred (or equivalent experience)
• Cisco Certified Network Professional (CCNP) Enterprise certification required
• One or more of the following strongly preferred: Cisco Certified Internetwork Expert (CCIE) Enterprise Infrastructure; CompTIA Security+; CompTIA Network+; ITIL 4 Foundation; a Federal Enterprise Architecture Framework (FEAF)-based enterprise architecture credential (e.g., FEAC Institute ACEA or CEA), * At least 10 years of progressive enterprise network engineering and architecture experience, with deep expertise in routing and switching
• Demonstrated ability to read and interpret device configurations, routing tables, and live network traffic
• Experience designing and documenting network topology and segmentation in large, complex enterprise environments; federal experience preferred
• Proven track record operating across multi-vendor network environments

Technical Expertise

• Advanced Layer 2 / Layer 3 routing and switching (e.g., BGP, OSPF, EIGRP, VLANs, VRFs)
• WAN, SD-WAN, VPN, and site-to-site connectivity design and troubleshooting
• Network segmentation and microsegmentation aligned to Zero Trust principles
• Familiarity with DNS, DHCP, and IP address management (DDI)
• Packet capture and network traffic analysis
• Network discovery, mapping, and documentation tools
• Working knowledge of federal security frameworks (e.g., NIST SP 800-53 and NIST SP 800-207 Zero Trust Architecture)

Additional Skills

• Excellent written and verbal communication, including briefing senior leadership and federal stakeholders
• Strong documentation discipline and attention to detail
• Strong analytical, problem-solving, and risk-identification skills
• Effective at collaborating with cross-functional teams to align technical work with program outcomes
• Adaptability in a fast-paced, evolving environment with shifting priorities

Clearance

• Must be a U.S. citizen and be able to obtain a federal background investigation

Pulled from the full job description

• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Opportunities for advancement, * Contribute to a mission-critical federal modernization program with high visibility and impact
• Own the authoritative network baseline that shapes enterprise security, cloud, and consolidation decisions
• Be part of a growing company that values innovation, technical excellence, and problem-solving
• Work alongside a senior, multidisciplinary team of architects and engineers
• Opportunities for professional growth and advancement

Pay: $105,000.00 - $130,000.00 per year

Benefits:

• Dental insurance
• Health insurance
• Paid time off
• Vision insurance

The C.A.S.E. Engineering Group is an Information Technology (IT) engineering firm that specializes in providing cybersecurity advisory services, modernizing IT architectures, developing and implementing IT strategic plans, and designing and engineering innovative systems, software, and applications. C.A.S.E. stands for Cybersecurity, Architecture, Strategy, and Engineering, which reflects both our core expertise and our belief that developing innovative solutions in unique environments requires a balanced approach. While C.A.S.E. tailors its solutions on a case-by-case basis to address the specific challenges organizations face, it also leverages industry best practices to ensure efficiency, security, and long-term success.