Cloud Network Security Architecture Manager (TIC 3.0)

General Dynamics IT; United States; Hybrid; USD 115,000 - 155,000; Full time

Benefits offered by this job

Growth opportunities

Internal mobility

Competitive pay & PTO

Military-friendly culture

Job summary

General Dynamics IT in the United States is seeking a Cloud Network Security Architecture Manager to lead TIC 3.0 modernization across VA's hybrid and multi‑cloud environments, transforming legacy perimeter models into distributed trust zones with policy enforcement points.

This role demands designing Zero‑Trust‑aligned, identity‑centric controls, segmentation, dynamic policy enforcement, and continuous validation.

Qualifications

• Bachelor's degree or equivalent experience.
• Experience with TIC 3.0 concepts, trust zones and distributed enforcement.
• Background in cloud, network, or security architecture (AWS, Azure, hybrid networking).
• Hands-on familiarity with firewalls, cloud gateways, IAM, and SIEM integrations.
• Strong understanding of NIST CSF, NIST SP 800-207 (ZTA), NIST SP 800-53 and federal standards.
• Experience with automation, scripting, or IaC (Terraform, Ansible, CloudFormation).

Responsibilities

• Lead TIC 3.0 modernization across AWS, Azure, and enterprise networks.
• Architect Zero-Trust‑aligned identity‑centric controls and segmentation.
• Design trust-zone mappings, cloud boundary protections, and secure interconnects.
• Guide policy enforcement points for cloud, on‑prem, remote, and mobile use cases.
• Integrate solutions with CDM, EINSTEIN, SIEM and monitoring pipelines.
• Mentor engineers and promote security best practices.

Skills

Cloud Platform

IT Service Management (ITSM)

Network Architecture

Education

Bachelor's degree or equivalent experience

Job description

Type of Requisition: Regular

Clearance Level Must Currently Possess: None

Clearance Level Must Be Able to Obtain: None

Public Trust/Other Required: MBI (T2)

Job Family: IT Infrastructure and Operations

Job Qualifications:

Skills: Cloud Platform, IT Service Management (ITSM), Network Architecture

Certifications: None

Experience: 10 + years of related experience

US Citizenship Required: No

Job Description:

Join GDIT in modernizing the Department of Veterans Affairs' network security posture under the NEDIIS program. As the Cloud Network Security Architecture Manager , you will lead the design and implementation of TIC 3.0‑aligned, Zero‑Trust‑enabled, distributed security architectures across VA's hybrid and multi‑cloud environments.

This role transforms legacy perimeter models into risk‑based trust zones, policy enforcement points (PEPs), cloud‑native security controls, and continuous monitoring‑integrated architectures , consistent with evolving federal cybersecurity guidance.

How You Will Make an Impact

Lead TIC 3.0 modernization , shifting security from centralized gateways to distributed trust‑zone and PEP-based enforcement across AWS, Azure, and enterprise networks.

Architect Zero‑Trust‑aligned identity‑centric controls, segmentation, dynamic policy enforcement, and continuous validation.

Design and manage trust‑zone mappings , cloud boundary protections, secure interconnects, and mission‑aligned risk‑based traffic flows.

Guide implementation of policy enforcement points for cloud, on‑prem, remote, and mobile use cases.

Integrate solutions with CDM, EINSTEIN, SIEM platforms, and continuous monitoring pipelines.

Partner with engineering, cyber, SOC, network, and operations groups to embed security across distributed systems.

Oversee gateway transformation , including redesign, scaling, load distribution, and modernization aligned with TIC 3.0.

Communicate architectural decisions, risks, and modernization strategies to VA leadership.

Evaluate emerging technologies, lead pilots/proofs of concept, and recommend mission‑aligned adoption strategies.

Support escalations and critical events involving cloud networks, identity systems, boundary controls, and PEP operations.

Produce architecture diagrams, trust‑zone definitions, PEP mappings, documentation, and compliance artifacts.

Mentor engineers and promote security best practices across cloud and network architecture teams.

What You'll Need to Succeed

Bachelor's degree or equivalent experience.

Hands‑on experience designing or supporting federal‑grade, Zero‑Trust‑aligned architectures (identity‑centric access, micro‑segmentation, encrypted traffic inspection, cloud boundary protections).

Experience with TIC 3.0 concepts , trust zones, distributed enforcement, and cloud/mobility use cases.

Background in cloud, network, or security architecture (AWS, Azure, hybrid networking, segmentation).

Hands‑on familiarity with firewalls, cloud gateways, DNS, IAM, API security, logging pipelines, and SIEM integrations .

Strong understanding of NIST Cybersecurity Framework, NIST SP 800‑207 (ZTA), NIST SP 800‑53 , and broader federal cybersecurity standards.

Experience with automation, scripting, or IaC (Terraform, Ansible, CloudFormation, ARM templates).

Effective communicator able to coordinate across multiple teams.

Ability to support emergency incidents, escalations, and critical events.

Preferred (Not Required)

AWS Solutions Architect - Professional

Azure Solutions Architect Expert

Kubernetes / OpenShift (CKA / CKAD)

VMware certifications

Terraform Associate

Visa sponsorship will not be provided for this position.

This role will require you to obtain and maintain Public Trust Suitability and will require you to provide onsite fingerprinting at a designated facility. This investigation may review personal and criminal behavior, financial conduct, foreign influence, as well as other adjudications.

Security & Location

Public Trust clearance required.

Hybrid position in Martinsburg, WV or Austin, TX - must work a regular weekly schedule with 2 to 3 days onsite as needed.

Visa sponsorship will not be provided for this position.

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Community: Award‑winning culture of innovation and a military‑friendly workplace

OWN YOUR OPPORTUNITY

Explore an enterprise IT career at GDIT and you'll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

The likely salary range for this position is $114,750 - $155,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set base