Security Architect

Overview

In this Cloud Network Architect role, you will lead multi-cloud network design to support the Air Force Cloud One Next program. You’ll set standards and patterns across AWS, Azure, GCP, and OCI to enable secure, resilient connectivity for DoD environments. You’ll collaborate with cloud engineering, cybersecurity, and operations to translate requirements into scalable network architectures and automation. This role offers high-impact work at the intersection of security, reliability, and DoD mission execution.

Pay / Benefits

• competitive salaries
• 401(k) retirement plan
• comprehensive medical/dental/vision coverage
• flexible work schedules for work/life balance
• tuition reimbursement

Responsibilities

• Design and maintain enterprise network architectures across AWS, Azure, GCP, and OCI, including V nets, routing, segmentation, ingress/egress, private connectivity, DNS, load balancing, and security services
• Develop reusable reference architectures, design patterns, and standards to ensure cross-CSP consistency
• Architect secure hybrid and cross-cloud connectivity using VPNs, private circuits, cloud interconnects, and SDN
• Define enterprise routing, IPAM, network segmentation, traffic isolation, and trust-boundary strategies for multiple environments and DoD levels
• Partner with cybersecurity to implement Zero Trust, encryption, traffic inspection, and access controls
• Design highly available, fault-tolerant architectures across regions and availability zones; plan for disaster recovery and continuity of operations
• Implement IaC for network provisioning using Terraform and Ansible; integrate with GitLab-based workflows
• Establish network observability, telemetry, capacity management, and troubleshooting across heterogeneous clouds
• Govern architecture changes to align with standards, security, and enterprise objectives
• Provide technical leadership and guidance to cloud, network, cybersecurity, DevSecOps, and operations teams
• Evaluate cloud-native and third-party networking technologies to improve scalability, security, automation, and efficiency
• Create architecture diagrams, interface definitions, network patterns, and decision records for implementation guidance

Key requirements

• Bachelor’s degree in a technical discipline and 12–15 years of relevant experience, or equivalent
• Extensive enterprise-scale network architecture experience (routing, switching, firewalls, DNS, VPNs, private connectivity, segmentation)
• Multi-cloud experience across at least two CSPs (AWS, Azure, GCP, OCI) with cross-environment architecture capabilities
• Deep cloud networking knowledge (VPC/VNet, transit networking, peering, private endpoints, cloud-native firewalls, NAT, DNS)
• Advanced TCP/IP knowledge, BGP, routing, CIDR/IPAM
• Strong network security understanding (Zero Trust, firewalls, encryption, traffic inspection)
• Hybrid connectivity experience (Direct Connect, ExpressRoute, Interconnect, FastConnect, IPsec VPNs)
• Automation & IaC experience (Terraform, Ansible, GitLab CI/CD)
• High availability design across AZs/regions and defined recovery strategies
• DoD or other regulated environment experience; familiarity with RMF, STIGs, NIST controls, secure enclave architectures
• Strong technical communication to translate complex architectures for engineers, cybersecurity stakeholders, and Government customers
• Ability to obtain and maintain a DoD Secret clearance

• technical communication
• collaboration across cross-functional teams
• problem-solving under complex constraints
• Terraform
• Ansible
• GitLab CI/CD

Full job description from WhatJobs. Apply for this role →