Senior DoD Network Architect — Zero Trust & Cloud

Amentum; Colorado Springs (CO); On-site; USD 155,000 - 175,000; Full time

Job summary

Amentum seeks a Senior Network Architect to support enterprise networking across DoD mission environments, including data center, WAN and cloud connectivity. The role requires strong leadership, architecture governance, and translating complex concepts into clear mission impact.

Responsibilities include Zero Trust design, multi-cloud integration, and network resilience with RMF/STIG compliance; DoW Secret clearance is required. The position offers day shift and up to 10% travel.

Qualifications

• 10+ years general full-time work experience.
• 5+ years designing large enterprise DoD networks.
• 1+ year in management or leadership role.
• Expert knowledge of routing and switching (BGP, OSPF, IS-IS), EVPN VXLAN and/or MPLS, QoS, IPv6, multicast, and network resiliency patterns.
• Must have demonstrated success implementing Zero Trust segmentation, 802.1X/NAC, identity aware firewall policy, and FIPS validated cryptography.
• Familiar with hybrid/multi cloud networking patterns and IL4/5/6 operational constraints; strong grasp of RMF/STIG compliance.
• Active DoW Secret Security Clearance

Responsibilities

• Participate in Architecture Review Boards and Change/Configuration Control Boards, maintaining traceability with HLD/LLD, ADRs, ICDs, and security overlays.
• Evaluate emerging capabilities (EVPN VXLAN fabrics, SD WAN/SASE, telemetry) with criteria, risk posture, and migration approaches.
• Develop and maintain network architecture roadmaps, standards, and best practices aligned with DoW and Agency requirements.
• Design underlay/overlay topologies for data centers and campuses and for WAN/backbone with routing protocols.
• Engineer high availability and fast convergence and plan for capacity, growth, and performance.
• Define IPv4/IPv6 addressing strategy, NAT policies, multicast/RP design, and DNS/DHCP/IPAM governance.
• Architect segmentation and micro segmentation with 802.1X and crypto boundary designs.
• Align to RMF, NIST SP 800-53/37, and DISA STIGs; map control inheritance and produce artifacts for ATO/cATO.
• Integrate network security controls and validate with tabletop/blue team exercises.
• Design hybrid and multi cloud connectivity and remote access/edge footprints with explicit security demarcation.
• Establish campus and branch designs with 802.1X and posture assessment, and centralized governance.
• Drive automation and observability; develop runbooks and test plans for failure scenarios.
• Produce and maintain enterprise network standards, ADRs, ICDs, test plans, and security overlays.

Skills

Excellent communication

Leadership

Strategic thinking

Education

Bachelor's degree in CS/IT or related

Active DoD Secret clearance

Tools

EVPN VXLAN

BGP

OSPF

MPLS

802.1X

FIPS cryptography

Job description

Amentum seeks a Senior Network Architect to support enterprise networking across DoD mission environments, including data center, WAN and cloud connectivity. The role requires strong leadership, architecture governance, and translating complex concepts into clear mission impact.

Responsibilities include Zero Trust design, multi-cloud integration, and network resilience with RMF/STIG compliance; DoW Secret clearance is required. The position offers day shift and up to 10% travel.