Principal Architect with Security Clearance

CyKor is a fast-growing Technology Solutions Provider to both federal and commercial clients. We attribute our continued growth to our core values, our professional team, and the valuable relationships with our clients. Our small and growing team fosters an environment in which each team member is respected, valued, and appreciated for their contributions. The Principal Architect is the senior-most technical authority within the Solution Delivery organization, accountable for architecture integrity, engineering execution, and technical outcomes across complex SD-WAN and enterprise network transformation efforts. This role prioritizes hands-on engineering leadership, solution validation, and technical governance over project management functions. The Principal Architect ensures that all deployed solutions are scalable, secure, compliant, and operationally viable, serving as the final technical decision authority across delivery engagements. The role operates as the lead engineer interface between Delivery, Engineering, and customer technical stakeholders, ensuring that design intent is preserved from architecture through deployment and sustainment. CORE RESPONSIBILITIES Technical Architecture Authority (35%)Own end-to-end network and SD-WAN architecture design integrity across all assigned engagementsValidate and approve low-level designs (LLDs), configurations, and deployment patterns prior to productionServe as the technical escalation authority for complex routing, segmentation, security, and transport issuesDefine and enforce standardized architecture patterns (templates, policies, segmentation models)Ensure alignment with Zero Trust, RMF, and federal compliance requirements Hands-On Engineering & Technical Delivery (30%)Remain actively billable performing: Advanced configurations (Cisco SD-WAN, IOS-XE)Policy design (OMP, control/data policies)Routing optimization (BGP, OSPF)Lead complex troubleshooting and root cause analysis across multi-site deploymentsConduct pre-deployment validation, lab testing, and burn-in activitiesPerform technical QA on all configurations and deployment artifactsSupport controller deployments, integration (ISE, security stack), and site turn-ups Technical Governance & Quality Assurance (15%)Establish and enforce engineering quality gates: Config reviewsDeployment readiness checksValidation test plansOwn as-built accuracy, runbooks, and engineering documentation standardsEnsure all deployments meet: STIG complianceNIST 800-53 controlsATO/ORR readiness requirementsIdentify and mitigate technical risk early in the lifecycle Engineering Team Leadership (10%)Lead engineers from a technical direction standpoint (not administrative PM control)Provide real-time engineering guidance during deployments and troubleshootingMentor engineers on: SD-WAN design patternsAutomation techniquesFederal compliance implementationEstablish technical standards, reusable configs, and deployment consistency Pre-Sales & Solution Continuity (5%)Provide technical validation of proposed architectures and BOMsEnsure solutions are: Deployable at scaleOperationally sustainableBridge solution intent - delivery execution to eliminate rework Innovation, Automation & Lab Validation (5%)Lead POC validation efforts for new technologies and deployment modelsDrive adoption of: Automation (Ansible, APIs, templating)Standardized deployment frameworksTranslate lab results into: Reference architecturesRepeatable deployment kits SUCCESS METRICSFirst-time deployment success rateReduction in post-deployment defectsConfiguration standardization across sitesTime to resolve complex technical issuesLab-to-production success rateATO/ORR technical readiness with minimal rework RequirementsDeep hands-on SD-WAN and enterprise networking expertiseProven ability to solve complex engineering problems under pressureStrong background in: Cisco SD-WAN (Viptela/Catalyst)Routing (BGP, OSPF)Security (ISE, Zero Trust)Experience in federal environments (RMF, STIG, ATO)Naturally operates as a technical leader - not a task managerMultiple cloud certificationsActive Public Trust clearance required; Secret/Top Secret clearance preferred REQUIRED TRAINING Required to complete ISO 9001 Training and Counterfeit Prevention Plan TrainingRequired to complete Cisco Certified Internet Expert (CCIE) certification and other vendor-specific niche certifications DESIRED TRAINING Desired to complete Information Technology Infrastructure Library (ITIL) 4 certification, Project Management Professional (PMP) Certification or SCRUM/Agile certification CyKor, LLC is an equal opportunity employer and values diversity in the workplace. All qualified applications will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, natural origin, or protected veteran status, and will not be discriminated against on the basis of disability.