Network Architect

The Network Architect will design, secure, modernize, and support highly available enterprise network services for the National Nuclear Security Administration. This senior technical position supports classified and unclassified LAN, WAN, datacenter, remote-access, and boundary-protection environments while providing technical leadership to network engineering and operations teams.

Key Responsibilities

• Design and maintain enterprise LAN, WAN, datacenter, VPN, firewall, load-balancing, and network access-control architectures.
• Develop network standards, reference architectures, implementation plans, and technology roadmaps.
• Provide technical leadership for routing, switching, segmentation, secure remote access, and boundary protection.
• Lead network modernization, equipment refresh, technology migration, and new-site deployment efforts.
• Evaluate proposed network changes for security, availability, performance, capacity, and operational impact.
• Troubleshoot complex network incidents and perform root-cause analysis for recurring issues and outages.
• Support vulnerability remediation, continuous monitoring, secure configuration, and Risk Management Framework activities.
• Develop network diagrams, engineering documentation, operating procedures, and technical briefings.
• Mentor network engineers and provide directions to geographically distributed technical teams.
• Collaborate with government stakeholders, cybersecurity teams, system administrators, vendors, and program leadership.

Required Skills

• Extensive experience designing and supporting large, geographically dispersed enterprise networks.
• Expert knowledge of LAN, WAN, datacenter, and network-security architecture.
• Advanced knowledge of routing and switching, including BGP, EIGRP, OSPF, VLANs, spanning tree, and high-availability design.
• Hands-on experience with enterprise Cisco routers and switches or comparable platforms.
• Experience deploying and maintaining Palo Alto, Cisco ASA, or comparable enterprise firewalls.
• Experience with IPsec, GRE, DMVPN, FlexVPN, VPN, and secure remote-access technologies.
• Experience with Cisco ISE, TACACS+, RADIUS, 802.1X, or comparable network access-control technologies.
• Knowledge of network segmentation, identity-based access, least privilege, and Zero Trust principles.
• Experience with network monitoring, packet analysis, and troubleshooting tools such as SolarWinds, Wireshark, or TCPDump.
• Strong technical leadership, documentation, communication, troubleshooting, and problem-solving skills.

Desired Skills

• Experience supporting NNSA, DOE, DoD, the Nuclear Security Enterprise, or another national-security organization.
• Experience supporting both classified and unclassified networks.
• Experience with Citrix NetScaler, ForeScout, Blue Coat, Proofpoint, or similar enterprise technologies.
• Familiarity with network automation, scripting, APIs, software-defined networking, cloud connectivity, or infrastructure as code.
• Experience with Trusted Internet Connections, wireless networks, IPv6, or data-center modernization.
• Prior experience as a Network Architect, technical lead, team lead, or senior network subject-matter expert.
• Familiarity with ITIL and federal IT service-management practices.

Education and Experience

• Bachelor’s degree in information technology, computer science, cybersecurity, network engineering, information systems, web technology, or related discipline.
• Minimum of 12 years of relevant network architecture, engineering, security, or infrastructure experience.
• At least eight years of experience supporting enterprise LAN, WAN, datacenter, or network-security environments.
• At least five years of experience in senior engineering, architecture, technical-lead, or subject-matter-expert role.
• Additional relevant experience may be considered in place of the degree requirement.

Certifications: CISSP, CompTIA Security+, or another industry-recognized cybersecurity certification appropriate to the position highly desired. CCNA, CCNP, CCIE, Palo Alto Networks, ITIL, or comparable networking, security, or service-management certification.

Security Requirements

• United States citizenship is required.
• Must possess an active DOE Q clearance or an equivalent clearance eligible for DOE reciprocity.
• Must be able to maintain required personnel-security and facility-access qualifications.
• Occasional travel or after-hours support may be required