Senior GovCloud Network Architect for DoD & BCAP

Defense Engineering Inc.; Northern (KY); Hybrid; USD 130,000 - 190,000; Full time

Job summary

Defense Engineering, Inc. seeks an expert GovCloud Network Engineer to architect, deploy, and manage secure cloud networking environments across DoDIN, NIPRNet/SIPRNet, and AWS GovCloud (US).

The ideal candidate will work with DISA to perform BCAP cutovers, navigate SNAP and CPTC workflows, and design complex TGW route tables across multiple VPCs with NGFW integration for compliant, private cloud routing.

Qualifications

• Active U.S. Government Secret clearance; Top Secret/SCI preferred.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience.

Responsibilities

• DISA BCAP connectivity planning, execution with mission partners.
• Lead SNAP and CPTC workflows to secure ATC.
• Manage NIPRNet IP blocks and integrate into cloud architecture.
• Design TGW topologies with complex route tables and associations.
• Integrate NGFWs and TGW Appliance Mode for inspection traffic.
• Enforce DISA STIGs and SCCA compliance across the network.

Skills

BCAP engineering

DISA

SCCA SNAP

CPTC

GovCloud AWS

Transit Gateway

NGFW integration

IPsec VPNs

Route Tables

NIPRNet

Route53 Resolver

VDSS

Terraform

CloudFormation

Git

Education

Bachelor’s degree in CS/Cybersecurity/IS

Tools

Palo Alto VM-Series

Fortinet FortiGate

Terraform

CloudFormation

Job description

Defense Engineering, Inc. seeks an expert GovCloud Network Engineer to architect, deploy, and manage secure cloud networking environments across DoDIN, NIPRNet/SIPRNet, and AWS GovCloud (US).

The ideal candidate will work with DISA to perform BCAP cutovers, navigate SNAP and CPTC workflows, and design complex TGW route tables across multiple VPCs with NGFW integration for compliant, private cloud routing.