Network Architect

Leidos•Hampton, VA

About The Position

The Defense Sector at Leidos is seeking a highly experienced Network Architect to lead the design and modernization of enterprise network infrastructure across Department of War networks. This individual will serve as the senior technical authority for network architecture - translating mission requirements into secure, resilient, and scalable designs spanning WAN, campus, data center, and tactical edge environments. The Network Architect will drive Zero Trust alignment, guide engineering teams through implementation, and ensure every design meets DISA, RMF, and program security requirements from concept through operations.

Requirements

US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date.
Bachelor’s degree with 12+ years of experience or a Master’s degree with 10+ years of experience. Additional experience may be considered in lieu of a degree.
DoD 8570/8140 IAT Level III certification (e.g., CISSP, CompTIA SecurityX/CASP+ CE) and a professional-level networking certification (e.g., Cisco CCNP Enterprise, Juniper JNCIP).
12–15 years of progressive network engineering experience, including at least 5 years in a network architecture or senior design role supporting DoD environments.
Expert-level knowledge of routing and switching, including BGP, OSPF, IS-IS, MPLS/L3VPN, IP multicast, and QoS design.
Proven experience architecting data center fabrics (e.g., VXLAN/EVPN, spine-leaf) and enterprise campus and WAN topologies.
Hands-on design experience with next-generation firewalls, network segmentation, and secure remote access architectures.
Working knowledge of Type 1 encryption (HAIPE/TACLANE) and classified network enclaves.
Strong understanding of dual-stack IPv4/IPv6 design and enterprise IP address management.
In-depth familiarity with RMF, NIST SP 800-53, DISA Network Infrastructure STIGs, and the DoD Zero Trust Reference Architecture.
Demonstrated ability to produce high-level and low-level designs, network diagrams, and architecture artifacts suitable for ATO packages and design reviews.

Nice To Haves

US Citizen with an active TS/SCI
Cisco CCNP, or Juniper JNCIP.
Design experience with SD-WAN and hybrid connectivity to AWS GovCloud, Azure Government, or classified cloud environments.
Proficiency with Ansible workflows for network configuration.
Familiarity with DISN transport services, Joint Regional Security Stacks (JRSS), CSfC, or cross-domain solution (CDS) architectures.
Experience designing deployable, disconnected, or low-bandwidth tactical network architectures.

Responsibilities

Develop target-state network architectures and multi-year modernization roadmaps aligned with mission, program, and DoD enterprise objectives.
Produce high-level and low-level designs for WAN, campus, data center, and cloud-connected environments, including routing policy, segmentation, and redundancy models.
Architect Zero Trust network capabilities, including micro-segmentation, software-defined perimeter, and policy enforcement points aligned with DoD ZT pillars.
Design secure interconnections between classification levels and mission partners, coordinating Type 1 encryption and boundary protection requirements.
Ensure all designs incorporate DISA STIG, SRG, and RMF control requirements from inception, and support ISSMs/ISSOs with architecture artifacts for eMASS and ATO submissions.
Evaluate architectural risk, define compensating controls, and support Plans of Action and Milestones (POA&M) remediation at the design level.
Align boundary and connection designs with DISA Connection Approval Process (CAP) and cybersecurity service provider (CSSP) requirements.
Serve as the senior technical authority and escalation point for network engineering, operations, and NOC/SOC teams.
Lead architecture and design reviews, present recommendations to government leadership, and brief Configuration Control Board (CCB) decisions.
Establish and maintain network design standards, reference architectures, and naming and addressing conventions.
Mentor senior and mid-level engineers and provide technical oversight during implementation and cutover activities.
Conduct technology assessments, Analyses of Alternatives (AoA), and proof-of-concept evaluations for emerging network capabilities.
Drive hardware and software lifecycle planning, including end-of-life replacement, capacity planning, and performance baselining.
Champion network automation and infrastructure-as-code practices to improve consistency, compliance, and deployment speed.