{"schemaVersion":"jobsearcher.job.v1","id":"71ebc10d297bb3ee217d1b67","url":"https://jobsearcher.com/jobs/71ebc10d297bb3ee217d1b67","canonicalUrl":"https://jobsearcher.com/jobs/71ebc10d297bb3ee217d1b67","title":"Network Architect","description":"The Defense Sector at Leidos is seeking a highly experiencedNetwork Architectto lead the design and modernization of enterprise network infrastructure across Department of War networks. This individual will serve as the senior technical authority for network architecture - translating mission requirements into secure, resilient, and scalable designs spanning WAN, campus, data center, and tactical edge environments. TheNetwork Architectwill drive Zero Trust alignment, guide engineering teams through implementation, and ensure every design meets DISA, RMF, and program security requirements from concept through operations.Roles and Responsibilities:Architecture & DesignDevelop target-state network architectures and multi-year modernization roadmaps aligned with mission, program, and DoD enterprise objectives.\r\nProduce high-level and low-level designs for WAN, campus, data center, and cloud-connected environments, including routing policy, segmentation, and redundancy models.\r\nArchitect Zero Trust network capabilities, including micro-segmentation, software-defined perimeter, and policy enforcement points aligned with DoD ZT pillars.\r\nDesign secure interconnections between classification levels and mission partners, coordinating Type 1 encryption and boundary protection requirements.Security & ComplianceEnsure all designs incorporate DISA STIG, SRG, and RMF control requirements from inception, and support ISSMs/ISSOs with architecture artifacts for eMASS and ATO submissions.\r\nEvaluate architectural risk, define compensating controls, and support Plans of Action and Milestones (POA&M) remediation at the design level.\r\nAlign boundary and connection designs with DISA Connection Approval Process (CAP) and cybersecurity service provider (CSSP) requirements.Technical Leadership & GovernanceServe as the senior technical authority and escalation point for network engineering, operations, and NOC/SOC teams.\r\nLead architecture and design reviews, present recommendations to government leadership, and brief Configuration Control Board (CCB) decisions.\r\nEstablish and maintain network design standards, reference architectures, and naming and addressing conventions.\r\nMentor senior and mid-level engineers and provide technical oversight during implementation and cutover activities.Lifecycle & ModernizationConduct technology assessments, Analyses of Alternatives (AoA), and proof-of-concept evaluations for emerging network capabilities.\r\nDrive hardware and software lifecycle planning, including end-of-life replacement, capacity planning, and performance baselining.\r\nChampion network automation and infrastructure-as-code practices to improve consistency, compliance, and deployment speed.Required Qualifications:Clearance:US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date.\r\nEducation:Bachelor’s degree with 12+ years of experience or a Master’s degree with 10+ years of experience. Additional experience may be considered in lieu of a degree.\r\nCertifications:DoD 8570/8140 IAT Level III certification (e.g., CISSP, CompTIA SecurityX/CASP+ CE) and a professional-level networking certification (e.g., Cisco CCNP Enterprise, Juniper JNCIP).\r\nExperience:12-15 years of progressive network engineering experience, including at least 5 years in a network architecture or senior design role supporting DoD environments.\r\nTechnical Expertise:Expert-level knowledge of routing and switching, including BGP, OSPF, IS-IS, MPLS/L3VPN, IP multicast, and QoS design.\r\nProven experience architecting data center fabrics (e.g., VXLAN/EVPN, spine-leaf) and enterprise campus and WAN topologies.\r\nHands-on design experience with next-generation firewalls, network segmentation, and secure remote access architectures.\r\nWorking knowledge of Type 1 encryption (HAIPE/TACLANE) and classified network enclaves.\r\nStrong understanding of dual-stack IPv4/IPv6 design and enterprise IP address management.Compliance Knowledge:In-depth familiarity with RMF, NIST SP 800-53, DISA Network Infrastructure STIGs, and the DoD Zero Trust Reference Architecture.\r\nDocumentation:Demonstrated ability to produce high-level and low-level designs, network diagrams, and architecture artifacts suitable for ATO packages and design reviews.Preferred Qualification:Clearance:US Citizen with an active TS/SCI\r\nExpert Certification:Cisco CCNP, or Juniper JNCIP.\r\nSD-WAN & Cloud:Design experience with SD-WAN and hybrid connectivity to AWS GovCloud, Azure Government, or classified cloud environments.\r\nNetwork Automation:Proficiency with Ansible workflows for network configuration.\r\nEnterprise Programs:Familiarity with DISN transport services, Joint Regional Security Stacks (JRSS), CSfC, or cross-domain solution (CDS) architectures.\r\nTactical Networks:Experience designing deployable, disconnected, or low-bandwidth tactical network architectures.DABAOPP1If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.Pay Range:\r\nPay Range $116,350.00 - $210,325.00The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.#J-18808-Ljbffr","company":"Socketdev","rawCompany":"socketdev","city":"Hampton","state":"VA","isRemote":false,"isActive":false,"createdAt":"2026-09-23T01:14:06.439Z","occupations":[{"code":"15-1241.00","title":"Computer Network Architects","slug":"computer-network-architects"},{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"928110","title":"National Security","slug":"national-security"},{"code":"541330","title":"Engineering Services","slug":"engineering-services"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"Network Architect","description":"The Defense Sector at Leidos is seeking a highly experiencedNetwork Architectto lead the design and modernization of enterprise network infrastructure across Department of War networks. This individual will serve as the senior technical authority for network architecture - translating mission requirements into secure, resilient, and scalable designs spanning WAN, campus, data center, and tactical edge environments. TheNetwork Architectwill drive Zero Trust alignment, guide engineering teams through implementation, and ensure every design meets DISA, RMF, and program security requirements from concept through operations.Roles and Responsibilities:Architecture & DesignDevelop target-state network architectures and multi-year modernization roadmaps aligned with mission, program, and DoD enterprise objectives.\r\nProduce high-level and low-level designs for WAN, campus, data center, and cloud-connected environments, including routing policy, segmentation, and redundancy models.\r\nArchitect Zero Trust network capabilities, including micro-segmentation, software-defined perimeter, and policy enforcement points aligned with DoD ZT pillars.\r\nDesign secure interconnections between classification levels and mission partners, coordinating Type 1 encryption and boundary protection requirements.Security & ComplianceEnsure all designs incorporate DISA STIG, SRG, and RMF control requirements from inception, and support ISSMs/ISSOs with architecture artifacts for eMASS and ATO submissions.\r\nEvaluate architectural risk, define compensating controls, and support Plans of Action and Milestones (POA&M) remediation at the design level.\r\nAlign boundary and connection designs with DISA Connection Approval Process (CAP) and cybersecurity service provider (CSSP) requirements.Technical Leadership & GovernanceServe as the senior technical authority and escalation point for network engineering, operations, and NOC/SOC teams.\r\nLead architecture and design reviews, present recommendations to government leadership, and brief Configuration Control Board (CCB) decisions.\r\nEstablish and maintain network design standards, reference architectures, and naming and addressing conventions.\r\nMentor senior and mid-level engineers and provide technical oversight during implementation and cutover activities.Lifecycle & ModernizationConduct technology assessments, Analyses of Alternatives (AoA), and proof-of-concept evaluations for emerging network capabilities.\r\nDrive hardware and software lifecycle planning, including end-of-life replacement, capacity planning, and performance baselining.\r\nChampion network automation and infrastructure-as-code practices to improve consistency, compliance, and deployment speed.Required Qualifications:Clearance:US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date.\r\nEducation:Bachelor’s degree with 12+ years of experience or a Master’s degree with 10+ years of experience. Additional experience may be considered in lieu of a degree.\r\nCertifications:DoD 8570/8140 IAT Level III certification (e.g., CISSP, CompTIA SecurityX/CASP+ CE) and a professional-level networking certification (e.g., Cisco CCNP Enterprise, Juniper JNCIP).\r\nExperience:12-15 years of progressive network engineering experience, including at least 5 years in a network architecture or senior design role supporting DoD environments.\r\nTechnical Expertise:Expert-level knowledge of routing and switching, including BGP, OSPF, IS-IS, MPLS/L3VPN, IP multicast, and QoS design.\r\nProven experience architecting data center fabrics (e.g., VXLAN/EVPN, spine-leaf) and enterprise campus and WAN topologies.\r\nHands-on design experience with next-generation firewalls, network segmentation, and secure remote access architectures.\r\nWorking knowledge of Type 1 encryption (HAIPE/TACLANE) and classified network enclaves.\r\nStrong understanding of dual-stack IPv4/IPv6 design and enterprise IP address management.Compliance Knowledge:In-depth familiarity with RMF, NIST SP 800-53, DISA Network Infrastructure STIGs, and the DoD Zero Trust Reference Architecture.\r\nDocumentation:Demonstrated ability to produce high-level and low-level designs, network diagrams, and architecture artifacts suitable for ATO packages and design reviews.Preferred Qualification:Clearance:US Citizen with an active TS/SCI\r\nExpert Certification:Cisco CCNP, or Juniper JNCIP.\r\nSD-WAN & Cloud:Design experience with SD-WAN and hybrid connectivity to AWS GovCloud, Azure Government, or classified cloud environments.\r\nNetwork Automation:Proficiency with Ansible workflows for network configuration.\r\nEnterprise Programs:Familiarity with DISN transport services, Joint Regional Security Stacks (JRSS), CSfC, or cross-domain solution (CDS) architectures.\r\nTactical Networks:Experience designing deployable, disconnected, or low-bandwidth tactical network architectures.DABAOPP1If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.Pay Range:\r\nPay Range $116,350.00 - $210,325.00The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.#J-18808-Ljbffr","datePosted":"2026-09-23T01:14:06.439Z","dateModified":"2026-09-23T01:14:06.439Z","hiringOrganization":{"@type":"Organization","name":"Socketdev","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Hampton","addressRegion":"VA","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"71ebc10d297bb3ee217d1b67"},"url":"https://jobsearcher.com/jobs/71ebc10d297bb3ee217d1b67"}}