- Location
- Colorado Springs, CO,US, US
- Workplace
- Remote, Hybrid
- Type
- Full-time
- Department
- Engineering
- Seniority
- Senior
- Experience
- 18+ years
- Education
- Master
- Clearance
- Required
- Source
- Eightfold
Description
Design and maintain secure cloud network architectures supporting mission systems operating across multiple AWS environments, security classification levels, and Special Access Program (SAP) enclaves. Architect network connectivity between cloud, on-premises, tactical, and enterprise environments while ensuring secure movement of mission data across multiple security domains. Develop networking solutions that support both Red and Black network architectures while maintaining appropriate separation, protection, and accreditation requirements. Design and implement secure multi-domain networking solutions that enable mission applications to access data while complying with DoW Cross Domain Solution (CDS) requirements and security policies. Collaborate with enterprise cloud providers and government organizations to integrate mission capabilities into existing DoD cloud ecosystems and DevSecOps Platform-as-a-Service (PaaS) environments rather than duplicating infrastructure. Develop cloud networking strategies supporting hybrid and multi-cloud architectures while enabling interoperability across enterprise services. Design secure connectivity utilizing technologies including AWS Transit Gateway, Virtual Private Cloud (VPC), Direct Connect, VPN, software-defined networking (SDN), network segmentation, and cloud-native networking services. Support implementation of Zero Trust Architecture (ZTA) principles through network segmentation, identity-aware networking, least privilege access, and secure service-to-service communications. Architect enterprise data aggregation and Security Information and Event Management (SIEM) connectivity across multiple cloud environments to support cyber operations, monitoring, and situational awareness. Evaluate cloud networking technologies, enterprise services, and emerging capabilities to improve scalability, resiliency, and mission effectiveness. Ensure cloud networking solutions comply with DoD cybersecurity policies, Risk Management Framework (RMF), DISA Security Technical Implementation Guides (STIGs), and applicable reference architectures. Support systems engineering activities including architecture development, interface definition, technical reviews, integration planning, and operational transition. Develop architecture documentation including network diagrams, interface specifications, implementation roadmaps, and engineering design packages. Provide technical guidance to software developers, infrastructure engineers, cybersecurity engineers, and mission system teams regarding cloud networking best practices. Support troubleshooting of complex cloud networking, routing, latency, and connectivity issues across enterprise environments. Communicate clearly, concisely, and with technical accuracy-oral and written Experience designing cloud networking solutions within AWS or other commercial cloud providers. Experience designing secure network architectures supporting multiple security classification levels. Experience with enterprise routing, switching, firewalls, VPNs, DNS, PKI, load balancing, and network segmentation. Experience implementing Zero Trust networking concepts. Experience supporting DoD cloud environments at Secret, Top Secret, or SAP levels. Experience integrating with enterprise DevSecOps platforms such as Platform One, Space CAMP, or other DoD enterprise PaaS environments. Experience designing hybrid cloud or multi-cloud architectures. Experience integrating enterprise SIEM platforms and cloud log aggregation architectures. Computer Engineering, Computer Science, Information Technology, Network Engineering, Cybersecurity. With Bachelor's, minimum 18+ years' experience; with Master's, minimum 10+ years' experience Top Secret Clearance with SCI eligibility required