Computer Network Architect, Journeyman

KAIROS Inc•Saint Inigoes Shores, MD

1d•$95,000 - $120,000

About The Position

KAIROS, Inc. is seeking an energetic, experienced, and highly motivated Computer Network Architect, Journeyman. This position supports the design, implementation, and maintenance of secure, reliable network infrastructure that meets operational needs. Working within established standards and under general direction, the architect evaluates requirements, develops network architectures and technical solutions, and supports deployment and optimization of local area networks, wide area networks, wireless systems, and related technologies. The role also troubleshoots complex network issues, monitors performance, maintains technical documentation, and collaborates with IT, cybersecurity, and project teams to ensure solutions meet performance, availability, and security requirements. The position may require up to 40% CONUS and OCONUS travel. KAIROS, Inc. is a growing Woman Owned Small Business established in July 2013. It specializes in Life Cycle Program Management, Engineering, Cybersecurity, Logistics and Sustainment, Enterprise Platforms and AI, and Additive Manufacturing. The company is headquartered in California, Maryland, near Naval Air Station Patuxent River. This position requires an active Top Secret/SCI security clearance. Candidates must be U.S. citizens and meet eligibility requirements for access to classified information, including completion of the full government background investigation. The estimated salary range is $95,000 to $120,000, with salary depending in part on skills, education, experience, location, contract budgets and requirements, and government labor category guidelines.

Requirements

Hands-on experience designing, integrating, and supporting enterprise network environments, including knowledge of network architecture, infrastructure governance, security requirements, and engineering workflows.
Experience implementing scalable, secure, resilient network solutions for large, complex enterprise environments, including deployment, migration, integration, and operational transition activities.
Experience with network topology, configuration management, infrastructure documentation, access controls, segmentation, and implementation of governance requirements within technical solutions.
Knowledge of routing, switching, VPN, SD-WAN, and firewall configuration.
Solid understanding of BGP, OSPF, EIGRP, hot and cold sites, and cloud and on-premises network infrastructure, including their characteristics, benefits, and limitations.
Knowledge of IBGP, EBGP, EIGRP, RIP, and OSPF.
Knowledge of VXLAN, OTV, Spanning Tree Protocol, and fundamental network switching and aggregation principles.
Working experience with service provider routers.
Experience integrating firewalls, security appliances, and VPN technologies with on-premises and cloud network connectivity.
Cloud networking knowledge, including Azure virtual networks, ExpressRoute, and private endpoints.
Knowledge of Zero Trust architecture, segmentation, and encryption standards.
Working knowledge of IKE, IKEv2, IPsec, and MACsec.
Understanding of Commercial Solutions for Classified (CSfC) and differences among its connectivity packages.
Basic experience using Python and Ansible to automate routine network engineering tasks.
Experience with monitoring and troubleshooting tools for network performance and availability.
Experience tracing VLAN configurations and identifying persistent MAC addresses.
Experience diagnosing and resolving routing protocol adjacency, convergence, path-selection, and route-advertisement issues.
Ability to distinguish application issues from network-related failures and troubleshoot each appropriately.
Strong customer relations, analytical, and technical documentation skills.
Excellent verbal and written communication skills to provide clear status and communicate issues.
Ability to build productive working relationships with customers and internal stakeholders while providing responsive, professional service.
Ability to work in a challenging, fast-paced, team-oriented environment and independently.
Ability to multitask and meet competing deliverable deadlines.
Self-starter with strong motivation, a strong work ethic, and a commitment to quality.
Proficiency with Microsoft Office applications, including Word, Excel, and PowerPoint.
Detail-oriented, with excellent interpersonal and customer service skills and the ability to adapt to evolving technology.
Bachelor’s degree in engineering, computer science, information technology, or a related technical field; six or more years of relevant work experience may substitute for a bachelor’s degree, or an associate degree plus four years of relevant work experience is acceptable.
Experience performing network architecture or network engineering in enterprise environments.
Knowledge of cybersecurity and data management.
Experience with network engineering, infrastructure engineering, or cloud networking.
Experience designing and operating enterprise network architectures across hybrid environments.
Experience supporting geographically distributed organizations with multiple sites and remote users.
Experience working in DoD-regulated environments.
Must be a U.S. citizen, eligible for access to classified information, able to complete the full background investigation, and hold an active Top Secret/SCI security clearance.

Nice To Haves

Experience supporting SCIF or secure facility network environments.
Familiarity with CSfC and Type One Encryption Methods.
Industry-recognized certifications such as CCNA, CCNP, or equivalent routing and switching certifications.

Responsibilities

Develop and maintain secure, scalable, resilient network architectures for LAN, WAN, wireless, virtual, cloud, and hybrid environments.
Analyze mission, business, technical, and security requirements; assess existing infrastructure; evaluate alternatives; and recommend network solutions, standards, technologies, and implementation approaches.
Plan and support integration of routers, switches, firewalls, VPNs, cloud connectivity, communication systems, applications, and government or enterprise platforms, ensuring compatibility and interoperability.
Incorporate Zero Trust principles, network segmentation, access controls, encryption, redundancy, continuity, and secure configuration requirements into network designs; identify risks and recommend mitigations.
Develop implementation and migration plans; support configuration and deployment; and conduct integration testing, verification, validation, and operational acceptance.
Monitor and analyze network capacity, availability, latency, routing, traffic flow, and security events; troubleshoot complex connectivity and performance issues; perform root-cause analysis; and recommend corrective actions.
Create and maintain architecture diagrams, logical and physical topologies, interface specifications, addressing plans, configuration baselines, test documentation, and technical procedures in accordance with configuration-management standards.
Support technology refreshes, lifecycle planning, cloud and infrastructure modernization, and continuous improvement.
Coordinate with system owners, network engineers, cybersecurity personnel, project teams, vendors, and other stakeholders from design through production support.
Work with system owners, network engineers, cybersecurity personnel, architects, and platform teams to analyze requirements, resolve connectivity and access issues, troubleshoot infrastructure, and support solutions from initial design through production.

Benefits

Medical coverage.
Employer-paid dental, vision, basic life/AD&D, and short-term/long-term insurance.
Health Savings Account with employer contribution.
401(k) plan with employer matching.
Annual discretionary bonuses.
Paid time off.
Eleven paid holidays.
Certification reimbursement program.
Tuition reimbursement program.
Paid parental leave.
Employee Assistance Program (EAP).
Rewards and recognition programs.
Community outreach events through the KAIROS Kares group.