Principal Network Architect

Ksat•Denver, CO

16h•$130,000 - $160,000•Hybrid

About The Position

KSAT Inc. is seeking a Principal Network Architect to serve as the technical authority for the design, architecture, security, scalability, and evolution of KSAT's global network infrastructure. This role will lead the development of highly available, secure, and resilient network architectures connecting worldwide ground systems, customer environments, remote operational sites, and cloud-based platforms supporting U.S. Government and commercial missions. The successful candidate will possess deep expertise in enterprise and carrier-class networking, secure WAN design, SD-WAN architectures, IPSec VPN technologies, cloud networking, and hybrid network integration. This individual will architect and guide implementation of global network solutions that transport sensitive data, including Controlled Unclassified Information (CUI), across geographically distributed environments while meeting U.S. Government security requirements and industry best practices. This position requires a seasoned network professional capable of translating mission and business requirements into secure, scalable, and supportable architectures while collaborating with cybersecurity, systems engineering, software, cloud, and operations teams throughout the system lifecycle.

Requirements

U.S. Citizenship required.
Ability to support USG programs involving Controlled Unclassified Information (CUI).
Ability to obtain and maintain a US SECRET Clearance.
Ability to travel internationally as required.
Minimum 10+ of progressive experience in enterprise, service provider, government, or mission-critical network engineering and architecture roles.
Demonstrated experience architecting and deploying large-scale WAN, SD-WAN, and hybrid-cloud networking solutions.
Expertise in enterprise routing and switching technologies with deep knowledge of: BGP, OSPF, Route redistribution, VRF technologies, VLAN and Layer 2/Layer 3 segmentation, High availability and resiliency architectures.
Extensive experience architecting global IPSec VPN solutions supporting geographically distributed environments.
Experience designing network architectures aligned with NIST 800-171/53 security controls and risk management frameworks.
Demonstrated knowledge of network segmentation, access control, encryption technologies, and secure network design methodologies.
Experience integrating cloud networking with physical enterprise infrastructure.
Hands-on experience with enterprise network technologies including: SD-WAN platforms, Firewalls, Network access control solutions, VPN concentrators, Core routing and switching platforms.
Experience producing architecture diagrams, technical design documentation, implementation plans, and engineering standards.
Ability to communicate complex technical concepts effectively to executive leadership, customers, engineers, and program stakeholders.
Bachelor's degree in Network Engineering, Computer Engineering, Electrical Engineering, Computer Science, Information Systems, or a related technical discipline. Equivalent combinations of advanced industry certifications, demonstrated network architecture expertise, and relevant professional experience will be considered in lieu of a degree.

Nice To Haves

Experience designing networks supporting Azure Government, Microsoft Azure, AWS GovCloud, or comparable cloud environments.
Familiarity with U.S. Government accreditation processes including RMF, FedRAMP, DISA STIGs, and related compliance frameworks.
Working knowledge of network automation and Infrastructure-as-Code technologies including: Python, Ansible, AWX, GitLab, Terraform, NetBox.
Experience designing and supporting globally distributed operational and mission networks.
Experience integrating satellite communications systems, ground stations, RF transport systems, and related operational technologies.
Industry certifications such as: Cisco CCNP Enterprise, Cisco CCIE Enterprise Infrastructure, Azure Network Engineer Associate or AWS Advanced Networking Specialty.

Responsibilities

Serve as the lead architect for KSAT's US-based mission networks, establishing network architecture standards, design principles, and technology roadmaps.
Design and evolve secure global SD-WAN architectures supporting connectivity between remote sites, ground stations, customer locations, cloud environments, and corporate networks.
Architect highly available hybrid-cloud networking solutions spanning on-premises infrastructure, commercial cloud services, and U.S. Government cloud environments.
Develop scalable routing, switching, segmentation, and traffic engineering strategies that support worldwide operations and future growth.
Design secure transport architectures utilizing IPSec VPNs, overlay networks, encryption technologies, and zero-trust networking principles.
Partner with cybersecurity teams to ensure network architectures align with NIST 800-171/53 controls, RMF requirements, CMMC objectives, and other applicable government security standards.
Conduct architecture reviews, threat-informed design assessments, and risk analyses to identify and reduce network and infrastructure vulnerabilities.
Architect connectivity solutions between physical infrastructure and cloud environments including Azure Government, AWS GovCloud, and other mission-supporting cloud platforms.
Provide technical leadership on complex routing and switching architectures utilizing BGP, OSPF, ISIS, MPLS, EVPN, VXLAN, and related technologies where applicable.
Design resilient international connectivity supporting low-latency, high-availability, and mission-critical operational requirements.
Serve as technical design authority for major infrastructure programs and strategic initiatives.
Develop and maintain network reference architectures, design standards, implementation guides, and engineering documentation.
Collaborate with international engineering teams to ensure consistency of design standards across global operations.
Participate in customer engagements, technical reviews, audits, and compliance activities supporting business growth and mission success.