Security Architect

About This Role

This role involves providing technical leadership for the design, integration, and evolution of secure multi-cloud networking capabilities for the U.S. Air Force Cloud One Next (C1N) ACSS contract. The Security Architect will serve as a senior technical authority for network architecture across AWS, Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI), developing common networking patterns while accounting for the unique capabilities and constraints of each Cloud Service Provider (CSP).

Responsibilities

• Design and maintain enterprise network architectures across AWS, Azure, GCP, and OCI, including virtual networks, routing, segmentation, ingress/egress, private connectivity, DNS, load balancing, and network security services
• Develop reusable reference architectures, design patterns, and technical standards that provide consistency across CSPs while appropriately leveraging cloud-native networking capabilities
• Architect secure connectivity between cloud environments, DoD networks, mission partner environments, and external services using technologies such as VPNs, private circuits, cloud interconnects, and software-defined networking
• Define enterprise routing, IP address management (IPAM), network segmentation, traffic isolation, and trust-boundary strategies supporting multiple environments, tenants, security domains, and DoD Impact Levels
• Partner with cybersecurity teams to implement Zero Trust networking principles, network access controls, firewall policies, encryption, traffic inspection, microsegmentation, and secure ingress/egress architectures
• Design highly available and fault-tolerant network architectures that account for CSP regions, availability zones, redundant connectivity, failure domains, disaster recovery, and continuity of operations
• Define and implement automated network provisioning using Infrastructure as Code (IaC) technologies such as Terraform and Ansible, integrating network configuration into Git Lab-based engineering and deployment workflows
• Establish approaches for network monitoring, flow logging, telemetry, performance analysis, capacity management, and troubleshooting across heterogeneous cloud environments
• Review proposed network changes and cloud architectures to ensure alignment with established standards, security requirements, operational constraints, and enterprise architecture objectives
• Serve as a senior technical advisor to cloud, network, cybersecurity, Dev Sec Ops, and operations teams, providing design guidance and resolving complex networking and connectivity challenges
• Evaluate cloud-native and third-party networking technologies to identify opportunities to improve scalability, security, automation, observability, and operational efficiency
• Develop architecture diagrams, interface definitions, network patterns, technical decision records, and implementation guidance that enable engineering teams to consistently implement approved