Network Architect with Security Clearance

• *This opportunity is remote with the chance of going on site in Bethesda, MD as needed** Title: • Network Architect Location:
• Bethesda, Maryland (remote with the chance of going on site in Bethesda, MD as needed) Clearance Required:
• Secret Certification Required:
• Security+ (or IAT II equivalent) Top Skills Required:
• Enterprise Network Architecture: Designing, assessing, and modernizing complex geographically distributed enterprise networks.
• Zero Trust Architecture (ZTA): DoD Zero Trust Strategy, DoD ZTRA, NIST 800-207, micro-segmentation, least privilege, identity-aware security.
• Network Assessment & Gap Analysis: Conducting current-state assessments, identifying architecture/security gaps, evaluating risks, and developing modernization roadmaps.
• Architecture Documentation & Technical Design: Creating physical/logical architecture diagrams, technical design documentation, and implementation plans.

Job Description

We are seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize enterprise network infrastructure across geographically distributed DoD sites. The candidate will lead network discovery, identify security and architectural gaps, and develop a future-state architecture aligned with the DoD Zero Trust Strategy, ZTRA, and NIST SP 800-207.

The role requires expertise in enterprise networking, micro-segmentation, identity-aware access, and security architecture, with collaboration across cybersecurity, endpoint engineering, and enterprise teams to enable secure, context-aware access. The candidate should be comfortable serving as the technical architecture lead while collaborating with specialized cybersecurity and enterprise engineers responsible for implementing endpoint, browser, and application security controls.

Key Responsibilities

Enterprise Network Discovery and Assessment

• Lead technical discovery and assessment of physical and logical network architectures across five enterprise sites, evaluating routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations.
• Analyze network traffic flows, ingress/egress points, segmentation capabilities, and security dependencies to assess Zero Trust readiness, including micro-segmentation and software-defined networking capabilities.
• Identify network vulnerabilities, architectural gaps, and modernization opportunities while evaluating existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture (ZTRA).
• Develop comprehensive As-Is Network Topology documentation and contribute to the DoD ZTA Gap Analysis Report.

Zero Trust Architecture Design

• Lead the development of a future-state Zero Trust Network Architecture aligned with DoD ZTRA Target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access.
• Evaluate modernization opportunities for legacy network infrastructure, perimeter-based security, and VPN access while maintaining or improving network performance and latency.
• Develop network architecture diagrams, technical specifications, and integration recommendations, identifying architectural dependencies, technical constraints, and implementation risks.
• Collaborate with enterprise engineers to integrate browser-based Zero Trust access into the enterprise security architecture.
• Document technical justifications for ZTRA requirements deemed infeasible and recommend alternative approaches where appropriate. Security Integration and Technical Oversight of enterprise Upgrade:
• Provide architectural guidance for transitioning legacy Group Policy Objects (GPOs) to Chrome Browser Cloud Management (CBCM), collaborating with Google Workspace/Chrome Enterprise engineers to align Context-Aware Access (CAA) policies with the target Zero Trust Architecture.

Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection (ATP), CAA, and Data Loss Prevention (DLP). Support resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation to ensure security controls align with approved architectural designs.

Modernization Planning and Knowledge Transfer

• Contribute to a prioritized, resource-estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment. This includes identifying technical dependencies, implementation priorities, and network modernization requirements.
• Develop supporting network architecture documentation and operational procedures and provide technical guidance and knowledge transfer to Government network engineering and cybersecurity personnel.
• Support operational handoff activities and long-term architectural sustainability. • This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret)
• Because an active or interim DoD clearance is required, U.S. Citizenship is required o Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms.  If eligible, the benefits available for this temporary role may include the following:

 Medical, dental & vision
 Critical Illness, Accident, and Hospital
 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
 Life Insurance (Voluntary Life & AD&D for the employee and dependents)
 Short and long-term disability
 Health Spending Account (HSA)
 Transportation benefits
 Employee Assistance Program
 Time Off/Leave (PTO, Vacation or Sick Leave)