Solutions Architect

What You Will Do

We are seeking a Solutions Architect 4 (SA-4) to join Los Alamos National Laboratory (LANL)’s Special Security IT & Cyber Operations (SSO-3) team. In this role, you will serve as the primary network architect for critical classified networks accredited by DOE-IN in support of multiple Strategic Intelligence Partnership Projects operating in classified environments. You will be responsible for the implementation of next-generation routing, switching, and firewalls for both red-side and black-side communications to meet current and emerging mission needs.

This position plays a critical role in protecting national security systems and ensuring compliance with federal and intelligence community cybersecurity frameworks. You will work closely with multidisciplinary technical teams, coordinating implementations to enable High Performance Computing, Linux infrastructure, storage platforms, Windows infrastructure, and more, while meeting stringent requirements set forth by the DOE-IN Router heads.

As a member of the Special Security IT & Cyber Operations (SSO-3) team, your responsibilities will include:

• Architecting, provisioning, deploying, and maintaining compliant and accredited network infrastructure.
• Leading remote and local site deployments and extensions of classified networks, including integration with project managers and stakeholder groups to establish requirements, timelines, budgets, resource utilization, and implementation best practices for accredited network infrastructure.
• Integration with peer networking and compliance teams, including Cybersecurity and COMSEC, to develop secure and compliant solutions meeting well-defined IC requirements.
• Highest‑tier escalation of IT issues and problems spanning multiple disciplines, including embedded systems, Linux, and Windows, focused on issues within the network stack (including at the software level).
• Directing network architecture management activities and monitoring.
• Leading architecture design reviews and contributing to enterprise‑wide cybersecurity and networking strategy.
• Providing technical leadership through mentorship and technical oversight of junior staff (NP‑1 – NP‑4).
• Representing LANL networking requirements in interagency and stakeholder engagements, including with DOE-IN Router heads and OGAs.

• Extensive experience managing networking equipment in both SCIF and SAPF environments for sponsors with varying requirements and implementation preference.
• Expert‑level knowledge of Cisco routing and switching for LAN, WAN, and data fabric implementations within an accredited context.
• Expert‑level knowledge of secure network deployments.
• Experience with router and switch hardening to STIG.
• Proven ability to lead and execute complex deployments of networks to both local and remote‑managed sites.
• Experience participating in change management for accredited systems.
• Deep understanding of secure systems engineering and cybersecurity principles.
• Mastery of vulnerability management for networking equipment.
• Ability to lead multidisciplinary teams and effectively manage competing priorities in high‑consequence environments.
• Expert knowledge and demonstrated application of current and future network, telecommunication, data management, security, hardware, software development, and systems programming technologies, how they interoperate, and how to architect complex solutions.
• Demonstrated excellent written and oral communication skills, organizational and project management skills.
• Demonstrated team‑building experience with technologists.

Position requires a bachelor’s degree and 12 years of related experience or an equivalent combination of education and experience directly related to the occupation. At this level, advanced professional certification or postgraduate study is expected.

• Router head: DOE‑IN appointed expert trusted with implementation of JWICS‑facing switches and routers on accredited networks.
• COMSEC:
  Experience configuring and deploying HAIPEs / TACLANEs.
• Secure Systems Integration:
  Knowledge of firewall implementations (Palo Alto), IPS / IDS (Cisco),…