Network Architect

TEKsystems • Bethesda, OH

5d • $72 - $72 • Hybrid

About The Position

We are seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize enterprise network infrastructure across five geographically distributed DoD sites. The role leads network discovery, identifies security and architectural gaps, and develops a future-state architecture aligned with the DoD Zero Trust Strategy, DoD Zero Trust Reference Architecture (ZTRA), and NIST SP 800-207. It requires expertise in enterprise networking, micro-segmentation, identity-aware access, and security architecture, and collaboration with cybersecurity, endpoint engineering, and Chrome Enterprise Premium teams. The architect serves as the technical architecture lead while working with specialized engineers responsible for endpoint, browser, and application security controls.

The position includes assessing existing networks, designing and documenting a target Zero Trust architecture, advising on Chrome Enterprise Premium integration and modernization, and supporting implementation planning, operational handoff, and knowledge transfer. It is a hybrid contract position based in Bethesda, Maryland.

Requirements

• At least 10 years of professional experience in enterprise network architecture, design, and engineering.
• Security+ certification.
• Relevant industry certification such as CCNP, CCIE, or equivalent advanced network/security credentials.
• Professional Zero Trust Architecture certification, such as CCZT, or documented leadership on at least two comparable multi-site Zero Trust assessment or implementation projects.
• Demonstrated experience designing and assessing complex, geographically distributed enterprise networks.
• Strong understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation.
• Experience developing physical and logical network architecture diagrams and technical design documentation.
• Knowledge of Zero Trust principles, including micro-segmentation, least-privilege access, identity-aware security, and encrypted transport, with expertise in the DoD Zero Trust Strategy, DoD ZTRA, and NIST SP 800-207.
• Experience conducting network assessments, identifying architecture gaps, and developing modernization recommendations.
• Ability to assess network performance, latency, security dependencies, and implementation risks.
• Strong technical communication, documentation, and stakeholder coordination skills.
• Ability to collaborate with cybersecurity, identity management, cloud engineering, and endpoint management teams.
• Ability to satisfy applicable Government personnel security requirements.

Nice To Haves

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline.
• Experience supporting DoD, federal civilian, or other regulated enterprise environments.
• Familiarity with Software-Defined Networking, Software-Defined Perimeter, and Zero Trust.

Responsibilities

• Lead technical discovery and assessment of physical and logical network architectures across five enterprise sites, including routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations.
• Analyze network traffic flows, ingress and egress points, segmentation capabilities, and security dependencies to assess Zero Trust readiness, including micro-segmentation and software-defined networking capabilities.
• Identify network vulnerabilities, architectural gaps, and modernization opportunities, evaluating current capabilities against the seven pillars of the DoD ZTRA.
• Develop As-Is Network Topology documentation and contribute to the DoD ZTA Gap Analysis Report.
• Lead development of a future-state Zero Trust Network Architecture aligned with DoD ZTRA Target-level requirements, incorporating micro-segmentation, identity-aware access controls, encrypted communications, and secure application access.
• Evaluate modernization of legacy network infrastructure, perimeter-based security, and VPN access while maintaining or improving network performance and latency.
• Develop network architecture diagrams, technical specifications, and integration recommendations, documenting dependencies, constraints, and implementation risks.
• Collaborate with Chrome Enterprise Premium engineers to integrate browser-based Zero Trust access into the enterprise security architecture.
• Document technical justifications for ZTRA requirements deemed infeasible and recommend alternatives where appropriate.
• Provide architectural guidance for transitioning legacy Group Policy Objects to Chrome Browser Cloud Management, coordinating with Google Workspace and Chrome Enterprise engineers on Context-Aware Access policies.
• Evaluate identity, device posture, and contextual access requirements and assess the architectural implications of Advanced Threat Protection, Context-Aware Access, and Data Loss Prevention.
• Support resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation of security controls against approved architecture.
• Contribute to a prioritized, resource-estimated implementation roadmap, identifying technical dependencies, implementation priorities, and network modernization requirements.
• Develop network architecture documentation and operational procedures, provide technical guidance and knowledge transfer to Government network engineering and cybersecurity personnel, and support operational handoff and long-term architectural sustainability.

Benefits

• Medical, dental, and vision coverage, subject to eligibility.
• Critical Illness, Accident, and Hospital coverage, subject to eligibility.
• 401(k) retirement plan with pre-tax and Roth post-tax contributions available, subject to eligibility.
• Voluntary life and AD&D insurance for the employee and dependents, subject to eligibility.
• Short- and long-term disability coverage, subject to eligibility.
• Health Spending Account (HSA), subject to eligibility.
• Transportation benefits, subject to eligibility.
• Employee Assistance Program, subject to eligibility.
• Time off or leave, which may include PTO, vacation, or sick leave, subject to eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed