Network Architect

Description Position Summary We are seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize enterprise network infrastructure across five geographically distributed DoD sites. The candidate will lead network discovery, identify security and architectural gaps, and develop a future-state architecture aligned with the DoD Zero Trust Strategy, ZTRA, and NIST SP 800-207. The role requires expertise in enterprise networking, micro-segmentation, identity-aware access, and security architecture, with collaboration across cybersecurity, endpoint engineering, and Chrome Enterprise Premium (CEP) teams to enable secure, context‑aware access. The candidate should be comfortable serving as the technical architecture lead while collaborating with specialized cybersecurity and Chrome Enterprise engineers responsible for implementing endpoint, browser, and application security controls. Key Responsibilities Enterprise Network Discovery and Assessment Lead technical discovery and assessment of physical and logical network architectures across five enterprise sites, evaluating routers, switches, firewalls, VLANs, network circuits, VPN infrastructure, and security configurations. Analyze network traffic flows, ingress/egress points, segmentation capabilities, and security dependencies to assess Zero Trust readiness, including micro‑segmentation and software‑defined networking capabilities. Identify network vulnerabilities, architectural gaps, and modernization opportunities while evaluating existing capabilities against the seven pillars of the DoD Zero Trust Reference Architecture (ZTRA). Develop comprehensive As-Is Network Topology documentation and contribute to the DoD ZTA Gap Analysis Report. Zero Trust Architecture Design Lead the development of a future‑state Zero Trust Network Architecture aligned with DoD ZTRA Target‑level requirements, incorporating micro‑segmentation, identity‑aware access controls, encrypted communications, and secure application access. Evaluate modernization opportunities for legacy network infrastructure, perimeter‑based security, and VPN access while maintaining or improving network performance and latency. Develop network architecture diagrams, technical specifications, and integration recommendations, identifying architectural dependencies, technical constraints, and implementation risks. Collaborate with Chrome Enterprise Premium (CEP) engineers to integrate browser‑based Zero Trust access into the enterprise security architecture. Document technical justifications for ZTRA requirements deemed infeasible and recommend alternative approaches where appropriate. Security Integration and Technical Oversight of Chrome Enterprise Premium Upgrade Provide architectural guidance for transitioning legacy Group Policy Objects (GPOs) to Chrome Browser Cloud Management (CBCM), collaborating with Google Workspace/Chrome Enterprise engineers to align Context‑Aware Access (CAA) policies with the target Zero Trust Architecture. Evaluate identity, device posture, and contextual access requirements while assessing the architectural implications of Advanced Threat Protection (ATP), CAA, and Data Loss Prevention (DLP). Support resolution of network connectivity, access control, and performance issues, and participate in technical reviews and validation to ensure security controls align with approved architectural designs. Modernization Planning and Knowledge Transfer Contribute to a prioritized, resource‑estimated implementation roadmap for transitioning from the current network architecture to the target Zero Trust environment. This includes identifying technical dependencies, implementation priorities, and network modernization requirements. Develop supporting network architecture documentation and operational procedures and provide technical guidance and knowledge transfer to Government network engineering and cybersecurity personnel. Support operational handoff activities and long‑term architectural sustainability. Skills zero trust, zta, network architecture, enterprise network architecture, network assessment, cisco, WAN/LAN, routing, switching, micro segmentation, identity aware security, gap analysis, network modernization, risk assessment, ccnp, ccnp certification Top Skills Details zero trust,zta,network architecture,enterprise network architecture,network assessment,cisco,WAN/LAN,routing,switching,micro segmentation,identity aware security,gap analysis,network modernization,risk assessment Additional Skills & Qualifications Required Qualifications/Certifications Minimum 10 years of professional experience in enterprise network architecture, design, and engineering. Security+; Relevant industry certifications such as CCNP, CCIE, or equivalent advanced network/security credentials. Professional certification in Zero Trust Architecture i.e., Certificate of Competence in Zero Trust (CCZT) or documented leadership on at least two multi‑site Zero Trust assessment/implementation projects of comparable scope. Demonstrated experience designing and assessing complex, geographically distributed enterprise networks. Strong understanding of enterprise routing, switching, firewalls, VLANs, VPNs, and network segmentation. Experience developing physical and logical network architecture diagrams and technical design documentation. Knowledge of Zero Trust Architecture principles, including micro‑segmentation, least‑privilege access, identity‑aware security, and encrypted transport i.e. expertise with the DoD Zero Trust Strategy, DoD ZTRA, and NIST SP 800-207. Experience conducting network assessments, identifying architecture gaps, and developing modernization recommendations tied with ability to assess network performance, latency, security dependencies, and implementation risks. Strong technical communication, documentation, and stakeholder coordination skills. Ability to work collaboratively with cybersecurity, identity management, cloud engineering, and endpoint management teams. Ability to satisfy the applicable Government personnel security requirements. Preferred Qualifications The following are recommended qualifications beyond the PWS minimum requirements: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Network Engineering, or a related discipline. Experience supporting DoD, federal civilian, or other regulated enterprise environments. Familiarity with Software-Defined Networking (SDN), Software-Defined Perimeter (SDP), and Zero Trust Experience Level Expert Level Job Type & Location This is a Contract position based out of Bethesda, MD. Pay and Benefits The pay range for this position is $72.12 - $72.12/hr. Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job‑related factors. Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre‑tax and Roth post‑tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long‑term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave) Job Type & Location This is a Contract position based out of Bethesda, MD. Application Deadline This position is anticipated to close on Oct 30, 2026. Workplace Type This is a hybrid position in Bethesda,MD. About TEKsystems We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real‑world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company. The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. About TEKsystems and TEKsystems Global Services Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full‑stack capabilities and speed. Were strategic thinkers, hands‑on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com. The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law. San Francisco Fair Chance Ordinance Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records. Massachusetts Lie Detector It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability. Use of Artificial Intelligence (AI) We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools. #J-18808-Ljbffr TEKsystems