Network Infrastructure Architect

The Network Infrastructure Architect provides enterprise‑level architecture, design, and technology‑strategy leadership to evolve the Homeland Security Enterprise Network (HSEN) and HQ LAN‑A toward a scalable, interoperable, zero‑trust framework. The role shapes a three‑year technology roadmap, conducts proof‑of‑concepts, and ensures all solutions meet DHS enterprise architecture standards, security accreditation (FISMA/NIST 800‑53), and 99.95 % availability objectives.

The objective of the support services for this project is to design, build, and maintain a cloud infrastructure with a focus on network security that supports the organization's technology and business needs. This involves architecting scalable, secure, and highly available cloud solutions, ensuring optimal performance and cost-efficiency in cloud environments such as AWS, Azure, and Google Cloud. The role requires close collaboration with other IT teams, stakeholders, and third-party vendors to deliver cloud-based infrastructure and services that align with organizational goals.

Key Tasks & Responsibilities

• Architecture & Design

• -Develop HSEN/LAN‑A reference architectures covering WAN/MPLS/SD‑WAN, campus LAN, wireless, TACACS/ISE, firewalls, and cloud on‑ramps.
• -Produce system design documents, diagrams, IP schemas, and maintain CMDB accuracy.
• -Model traffic, capacity, and failover scenarios; conduct gap analysis.

• Technology Strategy & Road‑mapping

• -Lead evaluations of emerging technologies and vendor offerings; perform COTS/OSS trade studies.
• -Deliver executive briefings and a rolling three‑year technology roadmap aligned with DHS mission and budget cycles.

• Security & Compliance

• -Embed zero‑trust, micro‑segmentation, and IPv6 compliance into all designs.
• -Support ATO renewals by providing architecture artifacts and POA&M responses.

• Implementation & Transition Support

• -Develop test plans, oversee lab validation, and provide Tier‑4 escalation during deployment.
• -Generate transition documentation for NOSC operations teams and deliver knowledge‑transfer workshops.

• This Role Provides Task Support for:

• -Infrastructure Engineering, Development, Implementation, Integration
• -Enterprise Application Integration
• -Gap Analysis and Benchmarking
• -Data Migration and Integration
• -Acquisition Support
• -Risk Assessment
• -Open-Source Integration
• -Enterprise Data Management
• -Collaboration Tools
• -Business Process Reengineering
• -Test and Evaluation Services
• -Financial Analysis
• -Feasibility Studies
• -Requirements Analysis
• -System Design Alternative (SDA) Studies
• -Architecture Validation and Verification

Education & Experience

• Minimum Qualifications (must have):

• -Master’s degree in Computer Science, Electrical Engineering, or related discipline.
• -15 + years architecting enterprise WAN/LAN solutions with ≥ 5,500 sites and ≥ 250,000 users.

• Preferred Qualifications:

• -10 + years direct support to DHS‑wide networks.
• -Hands‑on experience with SD‑WAN, cloud connectivity, and automation (Ansible/Python).

Certifications

• Must have an active CCIE (Routing & Switching / Enterprise Infrastructure / Service Provider) certification.
• Preferred certifications include: AWS Certified Advanced Networking, Juniper JNCIE, TOGAF, or GIAC‑GSEC.

Security Clearance

• U.S. Citizen with ability to obtain DHS Public Trust / Full‑Scope BI.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

• Location: National Capital Region; occasional travel (≤ 10 %) to remote DHS facilities.
• Schedule: Standard 40‑hour week with participation in architecture review boards and after‑hours change windows.
• Telework: Flexible (up to 50 %) based on project phase.