Network Architect

MTSI is seeking a full-time Network Architect located at Wright-Patterson AFB, Ohio. Under general supervision, this position is responsible for acting as the prime contract liaison to the government mission partner, operational leadership and sub-contractors for configuring, installing, and maintaining mission networks needed to support the Air Force Advanced Aircraft Division. The Network Architect will serve as a senior technical leader responsible for designing, implementing, and modernizing secure, mission‑critical network architectures across multi‑domain environments. This role supports U.S. Air Force and Department of Defense (DoD) missions, requiring deep expertise in enterprise networking, cybersecurity, cloud integration, network automation, and Zero Trust. The position includes direct engagement with senior leadership to guide strategic architecture decisions, ensure security compliance, and drive the adoption of advanced networking capabilities across classified and unclassified domains. Key Responsibilities: Enterprise & Mission System Architecture Lead the design and deployment of secure, multi‑level, multi‑vendor network architectures supporting mission systems and enterprise environments. Develop enterprise architecture artifacts including baselines, data flow diagrams, and compliance documentation supporting accreditation and modernization roadmaps. Translate complex network solutions into clear technical and non‑technical communications for stakeholders at all levels. Cloud & Modern Infrastructure Design Design and integrate cloud infrastructure components from a networking perspective, ensuring secure connectivity, segmentation, and policy enforcement across hybrid environments. Guide enterprise transitions leveraging modern routing architectures, network fabrics, SDN technologies, and virtualized network services. Cybersecurity & Zero Trust Enablement Embed Zero Trust principles, access control architectures, segmentation, and firewall frameworks into network designs. Lead automation initiatives using Ansible, version control systems, and CI/CD pipelines to improve configuration consistency and reduce deployment time. Advanced Routing & Transport Engineering Architect and modernize WAN transport networks including DMVPN, Type-1 Encryption, and IPSEC encapsulated transport networks. Provide expert-level configuration and design support for OSPF, BGP, port‑channels, VPN architectures, wireless, and subnetting strategies. Support multi-vendor environments and translate architectural concepts across Cisco, Juniper, and Palo Alto platforms. Technical Leadership, Troubleshooting & Engineering Support Serve as Tier‑3 escalation for complex network issues, conducting root‑cause analysis, traffic analysis, and protocol-level diagnostics. Utilize tools such as Wireshark, Network Management Systems, sFlow/NetFlow, IPAM, network configuration management platforms, and SDN controllers. Mentor junior engineers and guide cross-functional teams including DevSecOps, system administrators, and cybersecurity specialists. Operate effectively in Linux environments and maintain version control workflows (Git familiarity preferred). Required Qualifications: Must have 5+ years of experience in network architecture, engineering, or large-scale system integration. Bachelor of Science in Computer Science, Information Technology, Computer Engineering, Information Systems, Cyber Security, or a related field. TS/SCI Clearance Deep understanding of TCP/IP, spanning‑tree architecture, routing protocols, firewall architecture, subnetting, ACLs, wireless, VPNs, network access control, and network security principles. Extensive experience with OSPF, BGP, DMVPN, network fabrics, firewalls, and advanced Layer 2/3 design. Experience designing cloud-connected networks and hybrid architectures. Experience operating in multi‑vendor environments with proficiency in Cisco, Juniper, and Palo Alto. Strong knowledge of network automation tools (Ansible preferred). Strong analytical and communication skills, able to explain complex engineering concepts clearly. Self‑starter with strong ownership, initiative, and accountability. Desired Certifications: CCNP JNCIP‑ENT or similar advanced routing/switching certification Additional security or cloud certifications are a plus Clearance: Must hold an active TS/SCI Security Clearance Travel: Travel will be required periodically for various reasons. #LI-MS1 #LI-Onsite