Enterprise Network Architect (IT System Architect - Senior Principal)

BAE Systems•Falls Church, VA

32d•$132,962 - $226,035

About The Position

BAE Systems is seeking an Enterprise Network Architect to serve as the enterprise domain authority for network architecture across on-premises, cloud, hybrid, edge, and secure-access environments. This influential individual-contributor role defines architecture direction, patterns, standards, reference architectures, and roadmaps for connecting and securing users, applications, data, sites, cloud platforms, and business services. The architect leads complex, cross-functional network initiatives and is the lead architecture authority for the Network workstream within the company's Move-to-Cloud transformation. The position combines deep technical expertise in routing, switching, WAN, data center and cloud networking, network security, software-defined networking, automation, and SASE/SSE with the ability to create practical enterprise standards and executable modernization roadmaps. This hands-on architect moves among enterprise strategy, detailed design, proof-of-concept work, vendor and platform evaluation, Infrastructure as Code, and executive communication. The role builds alignment across architecture, cybersecurity, cloud, infrastructure, operations, program management, application teams, business stakeholders, and technology partners through expertise, collaboration, and influence rather than formal authority. It also advances the Enterprise Architecture Innovation Program, mentors technical professionals, and helps ensure solutions transition effectively into operations.

Requirements

Bachelor's degree in Computer Science, Information Systems, Engineering, Telecommunications, or a related technical discipline; equivalent relevant professional experience may be considered in lieu of a degree.
12 or more years of progressive experience in network engineering, network architecture, infrastructure architecture, and/or enterprise architecture, including substantial responsibility for complex enterprise- or service-provider-scale networks.
Experience serving as lead architect or senior technical authority for a major network transformation, modernization, cloud-connectivity, or similarly complex multi-site/multi-system initiative.
Deep technical expertise across routing and switching, WAN, LAN, data center networking, cloud networking, network security, DNS, load balancing, QoS, resiliency, and secure remote/access architectures.
Advanced knowledge of routing protocols and large-scale network design, including technologies such as BGP, OSPF and/or IS-IS, MPLS, VPNs, and software-defined networking.
Strong architecture knowledge of SASE/SSE capabilities such as SD-WAN, SWG, CASB, ZTNA, FWaaS, DNS security, DLP, and related secure-access technologies.
Hands-on experience designing Azure and/or AWS cloud network architecture, including virtual networks/VPCs, routing, peering/transit, gateways, private connectivity, DNS, load balancing, and network security controls.
Experience with network automation and Infrastructure as Code using modern scripting, APIs, declarative provisioning, source control, CI/CD, and automated validation practices.
Experience evaluating network technologies and platforms through architecture analysis, proof-of-concept testing, and/or vendor engagement.
Ability to create enterprise network patterns, standards, reference architectures, architecture decision records, and technology roadmaps and drive adoption across multiple teams.
Proficiency with an enterprise architecture modeling/repository tool.
Advanced architecture visualization skills, including infrastructure/network communications diagrams, network-zone and segmentation views, cloud connectivity diagrams, data-flow diagrams, solution-sequencing diagrams, transition architectures, and roadmaps.
Working knowledge of TOGAF, Agile, iterative/incremental delivery, and Waterfall, with the judgment to apply them pragmatically.
Strong understanding of Zero Trust, secure-by-design architecture, and applicable network-security and regulatory considerations in controlled or highly regulated environments.
Exceptional verbal, written, and visual communication skills and the ability to influence senior leaders, program teams, cybersecurity, cloud/infrastructure teams, engineers, vendors, and business stakeholders.
Ability to lead through influence, resolve technically ambiguous issues, mentor senior technical professionals, and drive decisions across a highly matrixed enterprise.

Nice To Haves

TOGAF certification.
Advanced degree in Computer Science, Engineering, Telecommunications, Information Systems, or a related discipline.
Advanced networking certifications such as Cisco CCNP/CCIE, Juniper JNCIP/JNCIE, or equivalent.
Azure, AWS, and/or other major cloud networking certifications.
Experience with enterprise SASE/SSE, SD-WAN, network-security, or network-management platforms.
Experience architecting networks in aerospace, defense, manufacturing, telecommunications, or another large regulated enterprise.
Experience with controlled-data and defense-aligned environments, including CUI, ITAR/EAR, NIST 800-171/53, DFARS, RMF, and/or CMMC.
Experience leading technology innovation, proof-of-concept, rapid-prototyping, or emerging-technology incubation programs.
Experience with network product/platform strategy, carrier services, vendor management, and formal technology evaluation or sourcing processes.
Experience with AI infrastructure networking, advanced data center fabrics, edge networking, or other emerging network technologies.

Responsibilities

Serve as the enterprise architecture authority for networking and define current-, transition-, and target-state architectures across site/LAN, WAN, data center, cloud, remote access, internet/edge, and hybrid environments.
Create, manage, and advocate reusable enterprise network patterns, standards, principles, reference architectures, and implementation guidance.
Define architecture direction for routing, switching, DNS/DHCP/IPAM, load balancing, VPN and secure access, wireless, network services, carrier connectivity, QoS, resiliency, observability, and related capabilities.
Develop network modernization and technology roadmaps that reduce complexity, improve resiliency and supportability, enable cloud adoption, and align investments with business and mission outcomes.
Provide senior technical escalation support and recommendations for complex network architecture decisions, considering business value, security, risk, cost, performance, scalability, operations, and long-term sustainability.
Own and evolve enterprise network-zone archetypes, including trust levels, workload and use cases, connectivity models, firewall policies, security controls, ingress/egress requirements, and operational expectations.
Create segmentation and secure-connectivity architectures and patterns for on-premises and cloud environments, including north-south and east-west traffic flows.
Partner with Cybersecurity to translate Zero Trust and secure-by-design principles into practical network patterns, guardrails, and reusable controls.
Define architecture standards for firewalls, network security services, private connectivity, remote access, secure internet access, DNS security, traffic inspection, and related controls.
Ensure network architectures align with applicable NIST, CMMC, DFARS, RMF, CUI, ITAR/EAR, and other regulated-environment requirements while preserving business agility.
Define patterns, standards, and reference architectures for network management and service platforms, including monitoring, telemetry, configuration, orchestration, automation, performance management, and service assurance.
Lead architecture for SASE/SSE capabilities, including SD-WAN, SWG, CASB, ZTNA, FWaaS, DNS security, DLP, SaaS acceleration, and Network-as-a-Service where applicable.
Evaluate platform consolidation and modernization opportunities across network management, connectivity, security, and service delivery.
Develop technical evaluation criteria, architecture decision records, proof-of-concept approaches, and RFI/RFP input for strategic network technologies and vendors.
Partner with engineering and operations to ensure network standards and reference architectures are implementable, observable, supportable, and resilient in production.
Own network architecture for enterprise cloud landing zones and hybrid-cloud designs, covering virtual networks/VPCs, subnets, routing, peering/transit, gateways, private connectivity, DNS, load balancing, firewalls, and secure ingress/egress.
Partner with the Enterprise Cloud Architect to integrate approved connectivity, segmentation, resiliency, observability, and network-security patterns into cloud platform and application architectures.
Design and develop Infrastructure as Code and reusable automation for cloud network provisioning, configuration, policy enforcement, and lifecycle management.
Establish reusable network IaC modules, templates, testing approaches, and engineering patterns that improve delivery speed, repeatability, security, consistency, and supportability.
Apply software-defined networking, API-driven automation, source control, peer review, CI/CD, and automated validation to network engineering.
Serve as lead architecture authority for the Network workstream within the enterprise Move-to-Cloud program and define the network transition and target-state architecture for migration.
Translate application migration waves and business requirements into network connectivity, security-zone, routing, bandwidth, resiliency, DNS, ingress/egress, and dependency requirements.
Identify and resolve network-related unknowns, interfaces, dependencies, constraints, and sequencing issues as discovery progresses.
Partner with the Move-to-Cloud Solution Architecture lead, PMO, Cybersecurity, Cloud Engineering, Infrastructure, application teams, and vendors to align architecture decisions with milestones and business outcomes.
Provide architecture decision support and technical leadership during migration planning, pilots, cutovers, stabilization, and operational handoff.
Lead and mature the Enterprise Architecture Innovation Program by establishing repeatable intake, evaluation, prioritization, experimentation, and disposition processes.
Use lightweight workflow and collaboration tools, including SharePoint-based intake and portfolio mechanisms where appropriate, to track innovation ideas, experiments, decisions, owners, and outcomes.
Identify and assess emerging networking and infrastructure technologies, including software-defined networking, automation, cloud networking, edge, AI infrastructure/fabric networking, advanced telemetry, and next-generation security architectures.
Lead or sponsor proof-of-concept and rapid-prototyping efforts to test architecture assumptions, quantify value and risk, and build evidence for adoption decisions.
Build relationships with strategic vendors, industry experts, and internal engineering teams to understand technology direction, challenge assumptions, and accelerate practical innovation.
Develop and maintain network architecture standards, reference architectures, decision records, reusable patterns, transition architectures, roadmaps, and other knowledge assets.
Use an enterprise architecture modeling/repository platform to document relationships among business capabilities, applications, infrastructure, network services, technologies, dependencies, and transformation roadmaps.
Create decision-oriented architecture visualizations, including network topology and communications diagrams, zone/segmentation views, cloud connectivity diagrams, data-flow diagrams, solution-sequencing diagrams, transition-state architectures, and technology/capability roadmaps.
Apply TOGAF and Agile, iterative/incremental, and Waterfall delivery approaches pragmatically according to initiative context.
Lead or materially contribute to architecture and design reviews, governance forums, standards adoption, exception decisions, and technology lifecycle planning for strategically significant network initiatives.
Translate business outcomes into architecture direction and complex network issues into understandable decisions, communicating options, tradeoffs, recommendations, risks, and roadmaps to technical and nontechnical stakeholders.
Engage stakeholders on intended outcomes, business impact, alternatives, cost, risks, and consequences before converging on technology choices.
Validate interfaces, traffic and data flows, security boundaries, assumptions, failure modes, capacity, performance, and operational requirements with technical teams.
Build alignment through active listening, partnership, technical credibility, and influence, enabling teams to execute within clear standards and guardrails.
Own the architecture-to-operations transition and partner with engineering and operations to ensure solutions are operationally ready, maintainable, scalable, and resilient.
Coach and mentor Network Engineers, Solution Architects, Cloud Architects, and other technical professionals without requiring formal reporting relationships.
Improve network architecture and design quality through reusable patterns, complex-design reviews, lessons learned, and constructive challenges.
Foster high-trust, accountable teams and promote knowledge transfer so architecture expertise, standards, and decision rationale are institutionalized.