NGE - Network Design Engineer Architect / Lead

Socket.dev; Colorado Springs (CO); On-site; USD 180,000 - 240,000; Full time

Job summary

Northern Technologies Group in Colorado Springs seeks a Network Design Engineer Architect / Lead for the Missile Defense Agency program under IRES. You will drive network architecture, modernization, and governance across the unified digital ecosystem, serving as principal network authority and primary interface among government leadership, military, and industry partners.

Responsibilities include leading a multidisciplinary team, designing data center fabrics, integrating VMware NSX/VCF, F5

Qualifications

• Must have 12+ years of general work experience; advanced education can reduce this requirement.
• Expert knowledge of routing and switching including BGP/OSPF/IS-IS, EVPN-VXLAN, MPLS.
• Experience implementing Zero Trust segmentation and 802.1X/NAC.

Responsibilities

• Lead Network Integrator across the program enterprise, aligning roadmaps and ICDs.
• Advise Government NGE Technical Director; translate needs into roadmaps and baselines.
• Mentor a multidisciplinary team; manage design reviews and audits.
• Architect scalable multi-site data center fabrics with NX-OS and EVPN-VXLAN.
• Integrate data center networking with VMware NSX/VCF for SDN and micro-segmentation.
• Design enterprise load balancing with F5 BIG-IP; ensure high-availability routing.
• Govern IP address management, DNS, and DHCP with Infoblox DDI.
• Define 802.1X/NAC policies; ensure DoW/NIST compliant security posture.

Tools

Cisco Nexus NX-OS

F5 BIG-IP

VMware NSX

VMware Cloud Foundation

Infoblox DDI

Versa SD-WAN

IPsec/MACsec

Job description

Description

Position Summary

The NGE - Network Design Engineer Architect / Lead supports the Missile Defense Agency (MDA) under the Integrated Research and Development for Enterprise Solutions (IRES) contract. Serving as the principal network authority and Lead Network Integrator for the Next Generation Environment (NGE), this position drives network architecture, modernization, and cross‑performer technical governance across MDA's unified digital ecosystem. The role leads network engineering efforts and serves as a primary technical interface among Government NGE leadership, MDA stakeholders, military leadership, and industry partners across the multi‑contractor program consortium.

Essential Duties and Responsibilities

• Serve as the Lead Network Integrator across the program enterprise, aligning network technical roadmaps and Interface Control Documents (ICDs) among government stakeholders, military leadership, and multiple industry performers and teammate companies.
• Serve as a direct technical advisor to the Government NGE Technical Director and Government Network Design Lead; translate mission capability needs into actionable network architecture roadmaps, technical baseline decisions, and engineering trade studies.
• Oversee, guide, and mentor a multidisciplinary team of network design and implementation engineers; manage technical task assignments, design reviews, peer code/configuration audits, and engineering deliverables.
• Architect scalable multi‑site data center fabrics utilizing Spine‑Leaf topologies, Cisco Nexus (NX‑OS) platforms, and EVPN‑VXLAN overlay technologies.
• Integrate data center networking with VMware NSX and VMware Cloud Foundation (VCF) to establish software‑defined networking and distributed micro‑segmentation.
• Design enterprise load balancing, traffic distribution, and SSL offloading/decryption architectures using F5 BIG‑IP technologies, including LTM, GTM, and APM.
• Establish high‑availability application routing across hybrid cloud boundaries.
• Architect resilient WAN transport and secure branch interconnects leveraging Versa Networks SD‑WAN/SASE solutions, MPLS, and zero‑trust edge boundary controls.
• Govern enterprise IP address management, automated DNS resolution, and DHCP provisioning frameworks using Infoblox DDI integrated with hybrid cloud orchestration pipelines.
• Define network segmentation, micro‑segmentation, ICAM integration, dynamic policy enforcement using 802.1X/NAC, and FIPS‑validated cryptography including IPsec and MACsec.
• Align network designs with the DoW Zero Trust Strategy, NIST SP 800‑53, and DISA STIG requirements in support of continuous Authorization to Operate (cATO).
• Lead Network Architecture Review Boards (ARB) and Engineering Change Boards.
• Establish authoritative High‑Level Designs (HLD), Low‑Level Designs (LLD), Architecture Decision Records (ADRs), and Interface Control Documents (ICDs) using Model‑Based Systems Engineering (MBSE) concepts.
• Brief senior leaders and translate complex technical concepts into mission impact.

Minimum Qualifications (Knowledge, Skills, and Abilities)

• Must be a U.S. Citizen.
• Must possess an active DoW Secret security clearance.
• 12+ years of full‑time general work experience; requirement may be reduced with completion of advanced education.
• 6+ years of directly related experience designing and leading large‑scale enterprise or DoW networks across data center, WAN/backbone, and campus/branch domains.
• 1+ year of experience working in a management or leadership role.
• Expert‑level knowledge of routing and switching technologies, including BGP, OSPF, IS‑IS, EVPN‑VXLAN and/or MPLS, QoS, IPv6, multicast, and network resiliency patterns.
• Demonstrated success implementing Zero Trust segmentation, 802.1X/NAC, identity‑aware firewall policy, and FIPS‑validated cryptography.
• Familiarity with hybrid/multi‑cloud networking patterns and IL4/IL5/IL6 operational constraints, with a strong understanding of RMF and STIG compliance.
• Must possess a current IAT III or IAM II baseline certification, such as CISSP, CASP+ CE, or CISM.
• Excellent communication skills with the ability to brief senior leaders and translate technical concepts into mission impact.

Preferred Qualifications

• Active DoW Top Secret security clearance with SCI eligibility, or the ability to obtain one.
• Bachelor's degree or higher in Computer Science or Information Technology.
• Experience performing within ITIL, TOGAF, or other architecture frameworks.
• Experience supporting the Missile Defense Agency (MDA) or other DoW organizations.
• Experience with software‑defined networking (SDN), automation, and cross‑domain solutions.
• CCIE certification in Enterprise Infrastructure, Security, or Data Center.
• CCNP certification in Enterprise, Service Provider, or Security, or equivalent expert credentials such as JNCIE, NSE 7/8, or PCNSE.
• ITIL 4 Foundation certification and an architecture framework credential, with TOGAF/DoDAF familiarity.
• Cloud networking foundations, such as AWS or Azure associate‑level credentials, supporting hybrid network designs.

Physical Demands and Work Environment

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform these functions.

While performing the duties of this position, the employee is regularly required to talk or hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually low to moderate.

Northern Technologies Group is an equal opportunity employer. We do not discriminate based on race, color, religion, sex, national origin, disability, age, or any other protected status under federal, state, or local law.

Travel

Up to 10%

Shift

Day shift; normal office hours that align with the core hours of the customer

Note

The company is an Equal Opportunity Employer, drug free workplace, and complies with ADA regulations as applicable.

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice. Employees will be required to follow any other job‑related instructions and to perform any other job‑related duties requested by any person authorized to give instructions or assignments. This document does not create an employment contract, implied or otherwise, other than an “at will” relationship.

The salary range listed represents a good faith estimate and is provided in compliance with applicable pay transparency laws. The final compensation offered will be determined based on a variety of factors, including your skills, experience, qualifications, internal equity, and market conditions.