Cloud Network Architect

DecisionPoint | Cortek • ,

6d • Remote

About The Position

DecisionPoint seeks a Cloud Network Architect to design, secure, and optimize cloud network architectures within IL5 AWS GovCloud environments supporting a large federal and DoD-aligned mission environment. This role focuses on network segmentation, routing, DNS architecture, VPC/VNet design, east-west traffic control, firewall policies, and secure boundary design aligned with Zero Trust principles. The Cloud Network Architect works closely with cloud platform engineers, cybersecurity teams, system administrators, and application architects to ensure resilient, compliant, and high-performing network infrastructure across enterprise cloud systems. This position is fully remote.

Requirements

• Must hold an active Top Secret clearance, supported by a Tier 5 background investigation.
• Bachelor’s degree in Networking, Computer Science, Engineering, or a related technical field.
• Minimum 7 years of experience in cloud or enterprise network engineering.
• Experience designing secure cloud network architectures including VPC/VNet segmentation.
• Experience with DNS, routing, firewalls, and secure boundary design.
• Experience supporting IL5, federal, or DoD network environments.
• Strong knowledge of AWS GovCloud networking services (VPC, NACLs, SGs, Transit Gateway, Route 53).
• Experience with VPN, Direct Connect, and hybrid-cloud connectivity patterns.
• Knowledge of Zero Trust network principles and east-west segmentation.
• Familiarity with load balancers, WAF, and boundary defense tools.
• CCNA or CCNP
• CompTIA Security+
• Strong problem-solving and diagnostic abilities for complex network issues.
• Excellent communication and collaboration skills across technical teams.
• High attention to detail and documentation accuracy.
• Ability to architect secure, scalable network solutions at enterprise scale.
• Ability to manage change in a fast-paced mission environment.

Nice To Haves

• Experience with network automation or IaC network configuration.
• Experience with container networking, service mesh, or microservices connectivity.
• Familiarity with cloud-native monitoring and packet analysis tools.
• AWS Networking Specialty
• ITIL v4 Foundation
• Additional cloud network certifications

Responsibilities

• Design IL5-compliant cloud network architectures including VPCs, subnets, routing, and segmentation.
• Implement network security controls aligned with Zero Trust, including east-west traffic filtering and micro-segmentation.
• Develop and maintain DNS architecture, API routing flows, and secure naming conventions.
• Architect secure cloud boundary protections including WAF, firewalls, and network access controls.
• Lead configuration of VPN, Direct Connect, and cross-account networking for hybrid-cloud or multi-VPC connectivity.
• Support traffic flow analysis, latency optimization, and performance tuning across cloud network layers.
• Ensure network designs comply with RMF, STIGs, IL5 cloud security standards, and boundary defense requirements.
• Troubleshoot complex network issues involving connectivity, DNS failures, load balancing, or segmentation errors.
• Develop network diagrams, architecture documentation, and network policy standards.
• Support monitoring and alerting implementations across network and connectivity components.
• Participate in Change Control Board (CCB) processes for network modifications.
• Provide guidance to engineering teams on cloud network patterns and operational impacts.

Benefits

• Equal Employment Opportunity and Affirmative Action employer
• Policy to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
• Authorization to share resume and personal information with subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior