Network System Architect

CAE USA; Arlington (TX); On-site; USD 140,000 - 210,000; Full time

Job summary

CAE USA is seeking an experienced Enterprise Network Architect to lead the design and deployment of a robust WAN for the US Air Force Training, Modeling and Simulation Community. You will craft scalable, secure network architectures and coordinate with simulation developers, cybersecurity specialists, and logistics planners to ensure high availability and low latency.

Responsibilities include end‑to‑end design, implementation, KPI enforcement, DoD compliance, vendor management, and knowledge

Qualifications

• Bachelor's degree in CS/IT/EE or related field.
• 8
• 8
• Experience designing large-scale, multi-site enterprise networks (LAN/WAN, SD WAN, MPLS, VPN).
• Experience with cloud networking (AWS, Azure, GCP) and hybrid cloud architectures.
• Hands-on with network security (firewalls, IDS/IPS, Zero Trust, segmentation).
• Familiarity with virtualization (VMware, Hyper‑V, KVM) and SDN/NFV.
• Deep knowledge of routing protocols (OSPF, EIGRP, BGP, IS‑IS) and switching technologies.
• Experience with network design tools (SolarWinds, Lucidchart, Visio) and monitoring & troubleshooting tools (Wireshark, NetFlow, sFlow, SNMP).
• Security technologies (Cisco ASA/Firepower, Fortinet, Palo Alto, Check Point).
• Cloud networking services (AWS VPC, Azure VNets, GCP VPC, Direct Connect, ExpressRoute).
• Experience with network automation frameworks (Ansible, Terraform, Python).
• Knowledge of Zero Trust architecture and micro‑segmentation.
• Experience with risk‑management frameworks (RMF) and authorizing officials (AO).
• Experience designing network architectures that support NIST SP 800‑53 Rev.5 controls, including segmentation, encryption, auditing, and least‑privilege enforcement.
• Ability to produce and maintain RMF‑ready architecture artifacts such as layer 3 network diagrams, data flows, and trust boundaries.
• Strong analytical and problem‑solving abilities; excellent communication skills; project management experience (Agile/Scrum and Waterfall); ability to mentor junior engineers.

Responsibilities

• Develop end-to-end WAN architecture that meets performance, scalability, and security requirements for the Air Force Training, Modeling and Simulation Community.
• Translate mission‑critical operational needs into detailed network design documents, including topology, routing protocols, and redundancy strategies.
• Lead the installation, configuration, and testing of WAN components (MPLS, SDWAN, VPN, satellite links, edge routers, firewalls, and load balancers).
• Coordinate with field teams to ensure seamless integration with existing LAN, data center, and cloud environments.
• Define and enforce key performance indicators (KPIs) such as latency, jitter, packet loss, and uptime.
• Conduct capacity planning, traffic engineering, and fault tolerance assessments to guarantee mission availability.
• Design and implement secure network boundaries, segmentation, and encryption mechanisms in line with DoD and CAE security policies.
• Perform regular vulnerability assessments, penetration testing, and compliance audits.
• Work closely with simulation developers, cybersecurity teams, logistics planners, and senior leadership to align network solutions with operational goals.
• Provide technical guidance and training to internal teams and external partners.
• Produce and maintain comprehensive network diagrams, configuration baselines, change‑management records, and troubleshooting guides.
• Capture lessons learned and best practices for future projects.
• Evaluate and select networking equipment, software, and service providers.
• Prepare cost estimates, manage project budgets and timelines.
• Monitor emerging WAN technologies and recommend enhancements to keep the network state of the art.
• Lead post‑deployment reviews and iterative optimization cycles.

Skills

Network design

Project management

Communication

Mentoring

Troubleshooting

RMF & AO

Analytical thinking

Education

Bachelor's degree in CS/IT/EE or related field

Master's degree in Network Engineering or MBA

Tools

SolarWinds

Lucidchart

Visio

Wireshark

NetFlow

sFlow

SNMP

VMware

Hyper-V

KVM

Ansible

Terraform

Python

Job description

Summary

CAE Defense & Security is seeking an experienced Enterprise Network Architect to lead the design and implementation of a robust wide area network (WAN) supporting the US Air Force Training, Modeling and Simulation Community's mission‑critical operations. The successful candidate will develop scalable, secure network architectures, integrate emerging technologies, and collaborate with cross‑functional teams including simulation developers, cybersecurity specialists, and logistics planners to ensure high availability, low latency, and compliance with DoD standards.

Architectural Design

• Develop end‑to‑end WAN architecture that meets performance, scalability, and security requirements for the Air Force Training, Modeling and Simulation Community.
• Translate mission‑critical operational needs into detailed network design documents, including topology, routing protocols, and redundancy strategies.

Implementation & Deployment

• Lead the installation, configuration, and testing of WAN components (MPLS, SDWAN, VPN, satellite links, edge routers, firewalls, and load balancers).
• Coordinate with field teams to ensure seamless integration with existing LAN, data center, and cloud environments.

Performance & Reliability Management

• Define and enforce key performance indicators (KPIs) such as latency, jitter, packet loss, and uptime.
• Conduct capacity planning, traffic engineering, and fault tolerance assessments to guarantee mission availability.

Security & Compliance

• Design and implement secure network boundaries, segmentation, and encryption mechanisms in line with DoD and CAE security policies.
• Perform regular vulnerability assessments, penetration testing, and compliance audits.

Stakeholder Collaboration

• Work closely with simulation developers, cybersecurity teams, logistics planners, and senior leadership to align network solutions with operational goals.
• Provide technical guidance and training to internal teams and external partners.

Documentation & Knowledge Management

• Produce and maintain comprehensive network diagrams, configuration baselines, change‑management records, and troubleshooting guides.
• Capture lessons learned and best practices for future projects.

Vendor & Budget Management

• Evaluate and select networking equipment, software, and service providers.
• Prepare cost estimates, manage project budgets and timelines.

Continuous Improvement

• Monitor emerging WAN technologies and recommend enhancements to keep the network state of the art.
• Lead post‑deployment reviews and iterative optimization cycles.

Qualifications and Education Requirements

• Bachelor's degree in Computer Science, Information Technology, Electrical Engineering, or a closely related field.
• 8 years of progressive experience in network design, implementation, and management.
• Proven track record designing large‑scale, multi‑site enterprise networks (LAN/WAN, SD WAN, MPLS, VPN, etc.).
• Experience with cloud networking (AWS, Azure, GCP) and hybrid cloud architectures.
• Hands‑on experience with network security (firewalls, IDS/IPS, Zero Trust, segmentation).
• Familiarity with virtualization (VMware, Hyper‑V, KVM) and software‑defined networking (SDN, NFV).
• Deep knowledge of routing protocols (OSPF, EIGRP, BGP, IS‑IS) and switching technologies (VLANs, STP, MSTP, EtherChannel, QoS).
• Experience with network design tools (SolarWinds, Lucidchart, Visio) and monitoring & troubleshooting tools (Wireshark, NetFlow, sFlow, SNMP).
• Security technologies (Cisco ASA/Firepower, Fortinet, Palo Alto, Check Point).
• Cloud networking services (AWS VPC, Azure VNets, GCP VPC, Direct Connect, ExpressRoute).
• Experience with network automation frameworks (Ansible, Terraform, Python).
• Knowledge of Zero Trust architecture and micro‑segmentation.
• Experience with risk‑management frameworks (RMF) and authorizing officials (AO).
• Experience designing network architectures that support NIST SP 800‑53 Rev.5 controls, including segmentation, encryption, auditing, and least‑privilege enforcement.
• Ability to produce and maintain RMF‑ready architecture artifacts such as layer 3 network diagrams, data flows, and trust boundaries.
• Strong analytical and problem‑solving abilities; excellent communication skills; project management experience (Agile/Scrum and Waterfall); ability to mentor junior engineers.

Preferred Skills

• Master's degree (e.g., MBA, MS in Network Engineering).
• Professional certifications: Cisco CCIE, CCDP, CCNP, JNCIE, VMware VCP‑NV, AWS Advanced Networking Specialty, Azure Network Engineer Associate, CompTIA Network+, CISSP, CISM.
• Understanding of regulatory compliance (HIPAA, PCI DSS, GDPR) as it applies to network design.

Security Responsibilities

• Must comply with all company security and data protection policies; personally responsible for proper marking and handling of all information.
• Eligible for DoD Personal Security Clearance.

Work Environment

• Duties performed in an office and manufacturing facility.
• Must be able to work overtime and shifts as required.
• Employee is on call 24 x7 for problem resolution.

Physical Demands

• Ability to sit and stand for extended periods.
• Ability to lift up to 25 lbs to various heights.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for their job. Duties, responsibilities, and activities may change at any time with or without notice.

Equal Opportunity Employer

CAE USA Inc. is an equal‑opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, national origin, age, sex, disability, or protected veteran status.

Accommodations for Applicants with Disabilities

If you need assistance to submit your application because of a disability, please contact our recruitment team at [e-mail].