Systems​/Network Architect Security Clearance

Position: Systems/Network Architect with Security Clearance
Overview SYSTEMS/NETWORK ARCHITECT (RDTE) Bowhead is seeking a highly skilled and cleared Systems/Network Architect to support our RDT&E (Research, Development, Test, and Evaluation) contract in Dahlgren, VA. The ideal candidate will be instrumental in the design, implementation, and management of robust network topologies, with a strong focus on modern network automation and security frameworks. This role requires deep expertise in Cisco architectures, enterprise-scale network management, and next-generation security implementations.

Responsibilities

Core Responsibilities:

* Analyze, design, and develop network architectures, including hardware/software identification, performance analysis, and network modifications.

* Manage complex routing and switching environments, including inner router configurations, BGP, route leaking, and VRF builds.

* Automate the provisioning of new switches and troubleshoot LAN automation issues.

* Assist in the configuration and troubleshooting of VMware NSX firewall policies and virtual routing.

* Identify connectivity issues spanning copper wiring, fiber path analysis, optical transceivers, and wireless devices.

* Install, maintain, and secure network devices across multiple separated network environments.

* Monitor system logs (using tools like Splunk or QRadar) to ensure optimal operating environments and proactive threat hunting.

* Manage and upgrade environmental monitoring systems (e.g., APC Struxure Ware) across multiple facility locations.

* Collaborate closely with cross-functional RDT&E teams to resolve customer issues efficiently. This position requires specialized knowledge and hands-on experience in the following strategic domains:
* Cisco Catalyst Center (C2C):
Lead the deployment, management, and assurance of network infrastructure using Catalyst Center (formerly DNA Center) for automated LAN deployments, lab building, and ongoing network telemetry.
* Zero Trust (ZT) Architecture:
Drive the organization's Zero Trust security model by implementing strict access controls, micro-segmentation, and continuous monitoring to ensure secure connectivity across all endpoints and environments.
* Cisco ISE (Identity Services Engine):
Architect and manage Cisco ISE deployments. Responsible for creating identity groups, configuring authorization profiles, integrating with external identity stores, and maintaining server software to support seamless Zero Trust Network Access.
* Software-Defined Access (SDA):
Support the rollout and administration of SDA fabrics across classified and unclassified networks to streamline network provisioning and enforce security policies. Qualifications
* Eight or more (8+) years of experience in network engineering, IT, or other related fields preferred
* Must have strong troubleshooting and critical thinking skills
* Strong attention to detail, good documentation skills, ability to write clear, concise project reports
* Ability to function with minimal instruction or supervision, or as a part of larger team reporting to formal project management
* Must have a DoD 8570 Compliance (e.g., CompTIA CASP+ or Security+) required
* Must have a Cisco Certified Network Associate (CCNA) or higher Cisco certification required
* Must obtain Cisco Certified Network Professional (CCNP) within 12 months of hire date.
* Preferred VMware Certified Professional (VCP), AWS Certified Cloud Practitioner, ITIL v4. Targeted salary range is $115,000 annually to $150,000 annually based on qualifications and experience. Physical Demands:
* Must be able to lift up to 10-15 pounds
* Must be able to stand and walk for prolonged amounts of time
* Must be able to twist, bend and squat periodically SECURITY CLEARANCE REQUIREMENTS:
Must currently hold a security clearance at the Top Secret level. US Citizenship is a requirement for this contract. #LI-JR1