Network architect

Designs and implements the Scalable GEOINT networks, including the local networks and the communications links between NTT nodes. Supports black-side routing and COMSEC, and keeps network devices aligned with Army, DISA, DoDIIS, and NIST security guidance.

RESPONSIBILITIES

• Design and implement LAN, WAN, intranet, extranet, and other data communications networks; perform network modeling, analysis, and planning, including network and computer security measures.
• Conduct capacity planning, model network infrastructure, design security measures such as firewalls, and recommend network and data communications hardware and software.
• Configure, implement, maintain, and monitor multiple local networks and communications links between NTT nodes, including black-side routing and cryptography (COMSEC) support.
• Maintain COTS network devices and topology in line with Army, DISA, DoDIIS, and NIST security guides and manufacturer best practices; configure devices as operational needs and accreditation authorities require.
• Maintain firmware, updates, and documentation for all Scalable GEOINT network devices and architecture; maintain license servers with redundancy for high availability.
• Configure, deploy, security-harden, maintain, and accredit Cisco LAN/WAN equipment, and set up and troubleshoot datacenter hardware stacks.
• Collaborate with external providers and mission partners (including NGA Maven, AGDF, and NARs) on planned changes, change deployments, accreditation plans, projected hardware/software recapitalization and future infrastructure needs, and responses to mission-impacting incidents.
• Incorporate security throughout all work: develop certification test procedures, evaluate and implement security configurations through security checklists and vulnerability scanning, and ensure audit integration and change management.

Required Skills

• Minimum 10+ years of network architecture experience.
• Bachelor's degree in a relevant field or equivalent experience.
• Extensive experience designing and implementing complex computer networks, with a deep understanding of network security principles.
• Active Final TOP SECRET clearance at start of work, with eligibility for SCI access.
• DoWM 8140.03 baseline certification at start of performance; CE certification or certificate of training in the relevant technology before privileged access to Government systems.

Desired Skills

• Cisco certifications, CCNA or better (highly desired).