Network Architect Subject Matter Expert (SME) #1592829

Network Designs•Washington, DC

46d•Onsite

About The Position

We are seeking an experienced and highly skilled Network Architect Subject Matter Expert (SME) to join our IT team. The Network Architect will lead the design, integration, and optimization of secure, large-scale enterprise networks. This role requires advanced expertise in routing, switching, wireless, firewall ecosystems, and identity services, as well as the ability to mentor junior to senior engineers and collaborate with enterprise operations staff. The ideal candidate will have strong analytical skills, deep technical knowledge, and proven experience designing resilient, scalable, and compliant federal network infrastructures.

Requirements

U.S. Citizenship is required
Must be able to obtain a Public Trust clearance
This position requires working onsite in Washington D.C., 5 days per week
Bachelor's degree in Computer Science, Information Technology, or related field (advanced degree preferred) and 10+ years of enterprise network engineering/architecture experience; or 13+ years of equivalent experience in lieu of degree
15+ years of enterprise network engineering/architecture experience
Must have at least one of the following: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, SSCP, or other Security certification.
Proven expertise in enterprise-scale network design, integration, and operations
Expert-level proficiency with Cisco routing, switching, and wireless platforms.
Strong experience with Cisco ISE, 802.1X certificate authentication, RADIUS, and TACACS+.
Advanced knowledge of firewall ecosystems, including Palo Alto Panorama and NGFWs, and Cisco ASA.
Hands-on experience with VXLAN, BGP EVPN, and IPSec tunneling.
Deep familiarity with Catalyst Center (DNAC) and streaming telemetry.
Solid understanding of PKI concepts, certificate management, and Active Directory (LDAP/LDAPS).
Significant experience with network monitoring and analytics platforms (SolarWinds or equivalent).
Excellent written and verbal communication skills.
Strong leadership, documentation, and mentoring abilities.

Nice To Haves

Knowledge of JusticeNet and Worldwide Networking architecture is a plus
ITIL v4 Foundation or higher
CCNP/CCIE Enterprise or Security
Palo Alto Networks PCNSE

Responsibilities

Lead the architecture, design, and implementation of enterprise network infrastructure across LAN, WAN, WLAN, and data center environments.
Integrate Cisco Identity Services Engine (ISE) with wireless and wired networks using 802.1X certificate authentication (RADIUS).
Design, configure, and manage TACACS+ and RADIUS attributes to support Cisco and non-Cisco systems.
Architect and manage firewall ecosystems, including Palo Alto Panorama and next-generation firewalls, as well as Cisco ASA/Firepower platforms.
Implement and support advanced routing and switching solutions (OSPF, BGP, VXLAN, BGP EVPN overlays).
Develop and maintain IPSec tunnel architectures and secure integrations with the Justice Management Network (JUTNet).
Oversee Catalyst Center (DNAC) integration with Wireless LAN Controllers, including streaming telemetry.
Leverage network management tools (SolarWinds and others) for monitoring, analytics, and proactive remediation.
Define, document, and enforce PKI, certificate-based authentication, and Microsoft Active Directory (LDAP/LDAPS) integrations.
Prepare and maintain architecture documentation, runbooks, and operational guides.
Experience with NetBox as a source of truth for network management and documentation.
Provide advanced troubleshooting and serve as an escalation point for critical incidents.
Mentor junior and senior network engineers and work collaboratively with enterprise operations technicians to ensure reliable service delivery.
Align network operations with ITIL principles and federal government compliance requirements.