Lead Zero Trust Network Architect

TEKsystems; Bethesda (MD); Hybrid; USD 82,000 - 117,000; Full time

Job summary

TEKsystems is seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize DoD network infrastructure across five sites. You will lead discovery, identify gaps, and shape a future-state architecture aligned with ZTRA and NIST SP 800-207, emphasizing micro-segmentation and identity-aware access.

You will collaborate with cybersecurity, CEP, and endpoint teams to implement secure, context-aware access, while guiding CBCM transitions and architecture

Qualifications

• Minimum 10 years of professional experience in enterprise network architecture and engineering.
• Security+ and CCNP/CCIE or equivalent certifications.
• Zero Trust Architecture certification or leadership on multi-site ZTA projects.
• Experience with DoD Zero Trust Strategy, ZTRA, and NIST SP 800-207.
• Strong ability to design network diagrams and technical design docs.
• Knowledge of micro-segmentation, identity-aware security, and encrypted transport.

Responsibilities

• Lead network discovery and assessment across five enterprise sites.
• Develop future-state Zero Trust network architecture aligned with DoD ZTRA.
• Collaborate with CEP and CSP teams to integrate browser-based Zero Trust access.
• Provide technical oversight of CBCM and CAA policy alignment.
• Produce architecture diagrams and implementation roadmaps.

Skills

Zero Trust architecture

Network architecture

DoD ZTRA

Identity-aware security

Micro-segmentation

NIST SP 800-207

CCNP/CCIE

CCZT / ZTA leadership

ZTA governance

Education

Bachelor's degree in Computer Science/IT/Cybersecurity/Network Engineering

Job description

TEKsystems is seeking an experienced Senior Network Architect / Lead Zero Trust Architect to assess and modernize DoD network infrastructure across five sites. You will lead discovery, identify gaps, and shape a future-state architecture aligned with ZTRA and NIST SP 800-207, emphasizing micro-segmentation and identity-aware access.

You will collaborate with cybersecurity, CEP, and endpoint teams to implement secure, context-aware access, while guiding CBCM transitions and architecture