Network System Architect

cae; Arlington (TX); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

Comprehensive benefits

Work-life balance

Professional development

Job summary

CAE USA Inc. seeks an experienced Enterprise Network Architect to lead the design and implementation of a robust WAN for the US Air Force Training Community.

You will build scalable, secure architectures and coordinate with cross-functional teams including simulation developers and cybersecurity specialists to ensure high availability and DoD compliance. The role requires hands-on experience with MPLS, SD-WAN, VPN, and cloud networking, plus a strong background in RMF and network security.

Qualifications

• Bachelor’s degree in CS/IT/EE.
• 8+ years of network design, implementation and management experience.
• Experience with WAN technologies (MPLS, SD-WAN, VPN) and DoD contexts.
• Familiarity with RMF/NIST controls and DoD security practices.

Responsibilities

• Develop end-to-end WAN architecture for the Air Force Training, Modeling and Simulation Community.
• Lead installation, configuration, and testing of WAN components (MPLS, SD-WAN, VPN, satellite links, edge routers, firewalls, load balancers).
• Coordinate with field teams to integrate with LAN, data center and cloud environments.
• Define KPIs (latency, jitter, packet loss, uptime) and perform capacity planning.
• Ensure security, compliance with DoD policies, and thorough documentation.

Skills

WAN design

MPLS

SD-WAN

Network security

DoD/compliance

Project leadership

Cloud networking

Education

Bachelor’s degree in CS/IT/EE

Tools

SolarWinds

Wireshark

NetFlow

Visio/Lucidchart

VMware

Ansible

Terraform

Python

Kubernetes

Job description

Who We Are:

• CAE Vision:Our vision is to be the worldwide partner of choice in defense and security, and civil aviation by revolutionizing our customers’ training and critical operations with digitally immersive solutions to elevate safety,efficiencyand readiness.

• CAE Defense & Security Mission:CAE's Defense and Security business unit focuses on helping prepare military customers to develop andmaintainthe highest levels of mission readiness.

• CAE Values:Empowerment, Innovation, Excellence,IntegrityandOneCAEmake us who weareand we strive to make a difference in the world while helping each other succeed.

What We Have to Offer:

• Comprehensive and competitive benefits package and flexibility that promotes work-life balance
• A work environment where all employees are valued, respected and safe
• Freedom to succeed by enabling team members to deliver, take initiatives and make decisions
• Recognition, professional development, advancement and having fun!

Summary

CAE Defense &Security is seeking an experienced Enterprise Network Architect to lead the design and implementation of a robust wide area network (WAN) supporting the US Air Force Training, Modeling and Simulation Community’s mission-critical operations. The successful candidate will develop scalable, secure network architectures, integrate emerging technologies, and collaborate with cross functional teams including simulation developers, cybersecurity specialists, and logistics planners to ensure high availability, low latency, and compliance with DoD standards. Candidates should possess deep expertise in WAN technologies (MPLS, SDWAN, VPN), proven experience in largescale defense or aerospace deployments, and strong analytical and communication skills to translate complex requirements into actionable designs.

Essential Duties and Responsibilities

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Architectural Design

• Develop end to end WAN architecture that meets performance, scalability, and security requirements for the Air Force Training, Modeling and Simulation Community.

Implementation & Deployment

• Lead the installation, configuration, and testing of WAN components (MPLS, SDWAN, VPN, satellite links, edge routers, firewalls, and load balancers).
• Coordinate with field teams to ensure seamless integration with existing LAN, data center, and cloud environments.

Performance & Reliability Management

• Define and enforce key performance indicators (KPIs) such as latency, jitter, packet loss, and uptime.
• Conduct capacity planning, traffic engineering, and fault tolerance assessments to guarantee mission availability.

Security & Compliance

• Design and implement secure network boundaries, segmentation, and encryption mechanisms in line with DoD and CAE security policies.
• Perform regular vulnerability assessments, penetration testing, and compliance audits.

Stakeholder Collaboration

• Work closely with simulation developers, cybersecurity teams, logistics planners, and senior leadership to align network solutions with operational goals.
• Provide technical guidance and training to internal teams and external partners.

Documentation & Knowledge Management

• Produce and maintain comprehensive network diagrams, configuration baselines, change-management records, and troubleshooting guides.
• Capture lessons learned and best practices for future projects.

Vendor & Budget Management

• Evaluate and select networking equipment, software, and service providers.
• Prepare cost estimates, manage project budgets and timelines.

Continuous Improvement

• Monitor emerging WAN technologies (e.g., SDWAN, edge computing) and recommend enhancements to keep the network state of the art.
• Lead post deployment reviews and iterative optimization cycles.

Qualifications and Education Requirements

• Bachelor’s degree in Computer Science, Information Technology, Electrical Engineering, or a closely related field.
• 8 years of progressive experience in network design, implementation, and management.
• Proven track record designing large scale, multi-site enterprise networks (LAN/WAN, SD WAN, MPLS, VPN, etc.).
• Experience with cloud networking (AWS, Azure, GCP) and hybrid cloud architectures.
• Hands-on experience with network security (firewalls, IDS/IPS, Zero Trust, segmentation).
• Familiarity with virtualization (VMware, Hyper V, KVM) and software defined networking (SDN, NFV).
• Deep knowledge of routing protocols (OSPF, EIGRP, BGP, IS-IS).
• Switching technologies (VLANs, STP, MSTP, EtherChannel, QOS).
• Network design tools (SolarWinds, Lucidchart, Visio).
• Network monitoring & troubleshooting (Wireshark, NetFlow, sFlow, SNMP).
• Security technologies (Cisco ASA/Firepower, Fortinet, Palo Alto, Check Point).
• Cloud networking services (AWS VPC, Azure VNets, GCP VPC, Direct Connect, ExpressRoute).
• Experience with network automation frameworks (Ansible, Terraform, Python).
• Knowledge of Zero Trust architecture and micro segmentation.
• Familiarity with network performance monitoring and capacity planning tools.
• Previous DoD/government cyber security experience
• Guidance on proper diagrams and documentation required
• Experience with Risk Management Framework (RMF) and Authorizing Officials (AO)
• Proven experience designing network architectures that directly support NIST SP 800-53 Rev.5 controls including boundary definition, segmentation, encryption in transit, auditing, and least-privilege enforcement across developmental and operational networks
• Ability to produce and maintain RMF-ready architecture artifacts such as layer 3 network diagrams, data flows, trust boundaries, etc that support the RMF SSP, SCTM, and other control validation tasks
• Demonstrated ability to translate NIST Rev 5 requirements into technical network designs, including evaluating control tradeoffs, proposing compensating controls, and supporting risk-based decisions with cyber compliance teams
• Experience with applying applicable Security Technical Implementation Guides (STIG) guidance
• Multi-Factor Authentication (MFA) implementation in a classified environment
• Implementation of Active Directory Domain solutions across enterprise networks
• Experience with Cross-Domain System (CDS) and Data Guard configuration and authorization.
• Strong analytical and problem solving abilities.
• Excellent communication skills (technical and non-technical stakeholders).
• Project management experience (Agile/Scrum and Waterfall).
• Ability to mentor junior engineers and lead cross functional teams.

Preferred Skills

• Master’s degree (e.g., MBA, MS in Network Engineering)
• Cisco Certified Inter-network Expert (CCIE) – Routing & Switching (or CCIE Enterprise Infrastructure).
• Cisco Certified Design Professional (CCDP).
• Cisco Certified Network Professional (CCNP) – Enterprise (Routing & Switching, Security, Data Center).
• Juniper Networks Certified Internet Expert (JNCIE) – Routing or Switching.
• VMware Certified Professional – Network Virtualization (VCP NV).
• AWS Certified Advanced Networking – Specialty or Microsoft Certified: Azure Network Engineer Associate.
• CompTIA Network+ (entry level baseline).
• Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM)
• Understanding of regulatory compliance (HIPAA, PCI DSS, GDPR) as it applies to network design.
• Demonstrated ability to translate NIST Rev 5 requirements into technical network designs, including evaluating control tradeoffs, proposing compensating controls, and supporting risk-based decisions with cyber compliance teams

Security Responsibilities

Mustcomplywithall company security and data protection / usage policies and procedures. Personally responsible for proper marking and handling of all information and materials, in any form. Shall not divulge any information, or afford access, to other employees not having a need-to-know. Shall not divulge information outside company without management approval. All government and proprietary information will be accessed and stored electronically on company provided resources.

• Incumbent must be eligible for DoD Personal Security Clearance.

Due to U.S. Government contract requirements, only U.S. citizens are eligible for this role.

Work Environment

• Duties performed in an office environment and manufacturing facility.
• Must be able to work overtime on andoff-shiftsasrequired.
• The employee is on call 24x7 for the resolution of problems and issues.

Physical Demands

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Ability to sit for extended periods of time
• Ability to stand for extended periods of time
• Ability to lift 25 lbs. to various height

Other Duties

Please note this job description is not designed to cover orcontain a comprehensive listing of activities, duties or responsibilities that arerequiredofthe employee for their job. Duties, responsibilities, and activities may change at any time with or without notice.

CAE USA Inc. is an equal opportunity employer, and all qualified applicants will be considered for employment without regard to any protected characteristic, including disability and protected veteran status, as defined under federal, state, or local laws.

About CAE

At CAE, our mission is clear: to help make the world a safer place. For nearly 80 years, we’ve driven innovation in simulation, training, and mission readiness to support critical operations worldwide. By leveraging advanced technologies, we empower our customers to operate smarter, faster, and more sustainably. Join a purpose-driven organization where bold ideas are encouraged, collaboration drives progress, and your growth fuels our shared success.

Position Type

Regular

Equal Opportunity Employer

CAE is an equal opportunity employer committed to providing equal employment opportunities to all applicants and employees without regard to race, color, national origin, age, religion, sex, disability status, protected veteran status, or any other characteristic protected by federal, state or local laws.At CAE, everyone is welcome to contribute to our success.

Data Privacy

Privacy Statement | CAE

CAE thanks all applicants for their interest. However, only those whose background and experience match the requirements of the role will be contacted.