Cloud Network Security Architecture Manager; TIC

Req : RQ216922

Type of Requisition: Regular

Clearance Level Must Be Able to Obtain: None

Public Trust/Other

Required:

MBI (T2)

Job Family: IT Infrastructure and Operations

Cloud Platform,IT Service Management (ITSM),Network Architecture

10 + years of related experience

GDIT has an opportunity for a Cloud Network Security Architecture Manager supporting the Department of Veterans Affairs (VA). This role leads secure network and cloud architecture design, TIC 3.0 modernization, and enterprise gateway operations. The manager partners with stakeholders, guides technology decisions, and ensures security, compliance, and performance across hybrid and multi‑cloud environments.

• Partner with internal teams and customer groups to define strategy, design solutions, and support implementation.
• Collaborate with stakeholders and vendors to ensure solutions meet technical and business requirements.
• Communicate technical status, risks, and impacts to leadership and customers.
• Evaluate new technologies, perform pilots, assess vendors, and recommend solutions.
• Resolve escalations by analyzing issues, providing guidance, and implementing fixes.
• Mentor engineering staff on key technologies and processes.
• Develop and execute test plans to validate solutions.
• Establish timelines, coordinate delivery, and support budgeting decisions.
• Write functional and technical requirements and solution documentation.
• Stay current on cloud, security, and network technology trends.
• Support selection, implementation, and operationalization of new technologies.

• Bachelor’s Degree or 4+ additional years of experience in lieu of a degree.
• 10+ years in cloud, network, or platform engineering/architecture supporting enterprise‑scale environments.
• 3+ years leading AWS/Azure hybrid or multi‑cloud environments in regulated or federal settings.
• Experience supporting large federal agencies or customers.
• Support 24×7×365 TIC operations, including critical incident bridge participation.
• Lead TIC 3.0 policy enforcement, DNS filtering, SSL decryption, IPS/IDS signature deployment.
• Manage DHS Cyber Hygiene, ED 19‑01, BOD 18‑01/19‑02 compliance and remediation actions.
• Oversee external connections (BPE/S2S VPN) approval, audits, and configuration lifecycle.
• Deliver required weekly TIC reports, vulnerability rollups, and compliance status updates.
• Lead TIC technical refresh, architecture redesign, and next‑generation gateway modernization.

• Experience designing landing zones, secure network/identity patterns, and CI/CD/IaC pipelines.
• Knowledge of NIST 800‑53/RMF, Zero Trust, TIC 3.0, FedRAMP services, and continuous monitoring.
• Experience delivering Kubernetes/Open Shift platforms with DR, RTO, and RPO requirements.
• Leadership in multi‑vendor/SIAM environments with cross‑domain change coordination and incident response.

• Cloud Platforms: AWS, Azure, IAM/Entra , landing zones, cloud networking, security, monitoring.
• Networking & Identity: VPC/VNet design, hub‑and‑spoke, SD‑WAN, DNS, NAT, firewalls, service mesh, SSO, PIV/FIDO
  2.
• Automation & Delivery:
  Terraform, Cloud Formation/Bicep, Ansible, Packer, Helm, Git Ops, policy as code.
• Containers & Platforms:
  Kubernetes/Open Shift operations, lifecycle management, security.
• Observability & SRE:
  Open Telemetry, Prometheus/Grafana, SIEM/log analytics, SLOs/error budgets.
• Data & Storage:
  Managed databases, backup/restore, immutability, replication.
• Security & Compliance: CIS/STIGs, vulnerability orchestration, encryption, secrets management.
• Cost & Performance:
  Fin Ops fundamentals, autoscaling, rightsizing, performance tuning.

• AWS Solutions Architect – Professional
• Microsoft Azure Solutions Architect Expert
• VMware Certified Professional / Advanced Professional
• CKA/CKAD or Open Shift Administrator
• Hashi Corp Terraform Associate / Authoring and Operations Professional

Hybrid, based out of Martinsburg, WV or Austin, TX.

Must be able to obtain and maintain a Public Trust clearance.

Visa sponsorship will not be provided for this position.

At GDIT, the mission is our purpose, and…