Senior Network Architect IRES - SSFB/HSV

Amentum; Colorado Springs (CO); On-site; USD 155,000 - 175,000; Full time

Job summary

Amentum seeks a Senior Network Architect to support enterprise networking across DoD mission environments, including data center, WAN and cloud connectivity. The role requires strong leadership, architecture governance, and translating complex concepts into clear mission impact.

Responsibilities include Zero Trust design, multi-cloud integration, and network resilience with RMF/STIG compliance; DoW Secret clearance is required. The position offers day shift and up to 10% travel.

Qualifications

• 10+ years general full-time work experience.
• 5+ years designing large enterprise DoD networks.
• 1+ year in management or leadership role.
• Expert knowledge of routing and switching (BGP, OSPF, IS-IS), EVPN VXLAN and/or MPLS, QoS, IPv6, multicast, and network resiliency patterns.
• Must have demonstrated success implementing Zero Trust segmentation, 802.1X/NAC, identity aware firewall policy, and FIPS validated cryptography.
• Familiar with hybrid/multi cloud networking patterns and IL4/5/6 operational constraints; strong grasp of RMF/STIG compliance.
• Active DoW Secret Security Clearance

Responsibilities

• Participate in Architecture Review Boards and Change/Configuration Control Boards, maintaining traceability with HLD/LLD, ADRs, ICDs, and security overlays.
• Evaluate emerging capabilities (EVPN VXLAN fabrics, SD WAN/SASE, telemetry) with criteria, risk posture, and migration approaches.
• Develop and maintain network architecture roadmaps, standards, and best practices aligned with DoW and Agency requirements.
• Design underlay/overlay topologies for data centers and campuses and for WAN/backbone with routing protocols.
• Engineer high availability and fast convergence and plan for capacity, growth, and performance.
• Define IPv4/IPv6 addressing strategy, NAT policies, multicast/RP design, and DNS/DHCP/IPAM governance.
• Architect segmentation and micro segmentation with 802.1X and crypto boundary designs.
• Align to RMF, NIST SP 800-53/37, and DISA STIGs; map control inheritance and produce artifacts for ATO/cATO.
• Integrate network security controls and validate with tabletop/blue team exercises.
• Design hybrid and multi cloud connectivity and remote access/edge footprints with explicit security demarcation.
• Establish campus and branch designs with 802.1X and posture assessment, and centralized governance.
• Drive automation and observability; develop runbooks and test plans for failure scenarios.
• Produce and maintain enterprise network standards, ADRs, ICDs, test plans, and security overlays.

Skills

Excellent communication

Leadership

Strategic thinking

Education

Bachelor's degree in CS/IT or related

Active DoD Secret clearance

Tools

EVPN VXLAN

BGP

OSPF

MPLS

802.1X

FIPS cryptography

Job description

Position Title

Senior Network Architect

Location

Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL

Relocation Assistance

None available at this time

Remote/Telework

NO - Not available for this position

Clearance Type

DoW Secret

Shift

Day shift

Travel Required

Up to 10% of the time

Description of Duties

The Senior Network Architect supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. Senior Network Architects are responsible for enterprise network architecture, modernization, and security across DoW mission environments (IL4/5/6). This role sets standards and roadmaps; leads end to end design for data center, campus/branch, WAN/SD WAN, and cloud connectivity; and drives Zero Trust–aligned segmentation and automation to deliver resilient, scalable, and compliant networks.

Key Responsibilities

Strategy & Architecture Governance

• Participate in Architecture Review Boards (ARB) and Change/Configuration Control Boards, maintaining traceability with HLD/LLD, ADRs, ICDs, and security overlays.
• Evaluate emerging capabilities (e.g., EVPN VXLAN fabrics, SD WAN/SASE, advanced telemetry) with adoption criteria, risk posture, and migration approaches
• Develop and maintain network architecture roadmaps, standards, and best practices aligned with DoW and Agency requirements.

Core Network Architecture & Design

• Design underlay/overlay topologies for data centers and campuses (spine leaf, EVPN VXLAN, MPLS L2/L3VPN) and for WAN/backbone (BGP/OSPF/IS IS, traffic engineering, route policy, communities).
• Engineer HA and fast convergence (ECMP, FHRP, FRR, ISSU/GSU) and plan for capacity, growth, and performance (QoS, queuing, shaping, policing).
• Define IPv4/IPv6 addressing strategy, NAT policies, multicast/RP design where required, and DNS/DHCP/IPAM governance.

Security Architecture & Zero Trust

• Architect segmentation and micro segmentation (identity /policy based), secure access (802.1X, certificate based auth), and crypto/crypto boundary designs (IPsec, MACsec) using FIPS validated algorithms.
• Align to DoW RMF, NIST SP 800 53/37, and DISA STIGs; map control inheritance and produce artifacts needed for ATO/cATO.
• Integrate network security controls (firewall policy frameworks, IDS/IPS, SWG, DLP) and validate with tabletop/blue team exercises.

Cloud, Edge & Cross Domain Connectivity

• Design hybrid and multi cloud connectivity (IL cloud constructs, private connectivity, transit/segmentation, inspection service insertion, east west control).
• Engineer remote access/telework, edge footprints, and mission partner/coalition interconnects with explicit security demarcation and monitoring.
• Campus & Branch
• Define campus access, distribution, and core designs with 802.1X, posture assessment, guest/IoT segmentation.
• Establish branch patterns (SD WAN, DIA/MPLS mix, local breakout controls) with consistent policy and centralized governance.

Automation, Reliability & Observability

• Drive intent based and policy driven operations: configuration standards, golden baselines, compliance drift detection, and repeatable change.
• Establish observability requirements (model driven/streaming telemetry, logs/metrics/flows) and SLOs; ensure runbooks and test plans cover failure scenarios.
• Documentation & Deliverables

Produce and maintain

• Enterprise Network Standards, High/Low Level Designs (HLD/LLD), Architecture Decision Records (ADRs), Interface Control Documents (ICDs), test/validation plans, cutover plans, security overlays, addressing/IP plans, and runbooks.

The successful candidate will

• Have excellent communication skills
• Be able to brief senior leaders and translate technical concepts into mission impact.

Basic Requirements

• Must have 10, or more, years of general (full-time) work experience
• May be reduced with completion of advanced education
• Must have 5, or more, years of direct experience designing and leading large-scale enterprise or DoW networks across data center, WAN/backbone, campus/branch domains.
• Must have 1, or more, years of experience working in a management or leadership role
• Must have expert level knowledge of routing and switching (BGP, OSPF, IS IS), EVPN VXLAN and/or MPLS, QoS, IPv6, multicast, and network resiliency patterns.
• Must have demonstrated success implementing Zero Trust segmentation, 802.1X/NAC, identity aware firewall policy, and FIPS validated cryptography.
• Must be familiar with hybrid/multi cloud networking patterns and IL4/5/6 operational constraints; strong grasp of RMF/STIG compliance.
• IAT III or IAM II baseline (examples: CISSP, CASP+ CE, CISM).
• Must have an active DoW Secret Security Clearance

Desired Requirements

• Have an active DoW Top Secret Security Clearance w/ SCI eligibility
• Have a Bachelor’s degree, or higher, in computer science, Information Technology
• Have experience with ITIL, TOGAF, or other architecture frameworks.
• Have experience supporting the Missile Defense Agency (MDA) or other DoW organizations.
• Have experience with software-defined networking (SDN), automation, and cross-domain solutions.
• Have 1, or more, of the following certifications:
• CCIE (Enterprise Infrastructure, Security, or Data Center)
• CCNP (Enterprise, Service Provider, or Security) or equivalent expert credentials (JNCIE, NSE 7/8, PCNSE).
• ITIL® 4 Foundation (service alignment) and an architecture framework credential (TOGAF/DoDAF familiarity).
• Cloud networking foundations (e.g., AWS/Azure associate level) helpful for hybrid designs.

This position will be posted for a minimum of 3 days. If a candidate has not been selected at that time, it will continue to be posted until a suitable candidate is selected or the position is closed.

Compensation Details

$155,000 – $175,000

The compensation range or hourly rate listed for this position is provided as a good‑faith estimate of what the company intends to offer for this role at the time this posting was issued. Actual compensation may vary based on factors such as job responsibilities, education, experience, skills, internal equity, market data, applicable collective bargaining agreements, and relevant laws.

Benefits Overview

• Health, dental, and vision insurance
• Paid time off and holidays
• Retirement benefits (including 401(k) matching)
• Educational reimbursement
• Parental leave
• Employee stock purchase plan
• Tax‑saving options
• Disability and life insurance
• Pet insurance

Note: Benefits may vary based on employment type, location, and applicable agreements. Positions governed by a Collective Bargaining Agreement (CBA), the McNamara-O'Hara Service Contract Act (SCA), or other employment contracts may include different provisions/benefits.

Original Posting

08/31/2026 - 09/09/2026

Amentum anticipates this job requisition will remain open for at least three days, with a closing date no earlier than three days after the original posting. This timeline may change based on business needs.

Amentum is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, sex, sexual orientation, pregnancy (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth, or breastfeeding), age, ancestry, United States military or veteran status, color, religion, creed, marital or domestic partner status, medical condition, genetic information, national origin, citizenship status, low‑income status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law. Learn more about your rights under Federal laws and supplemental language at Labor Laws Posters.