Modern Technology Solutions, Inc. (MTSI) is searching for a Senior Cloud Network Architect/Engineer in support of United States Space Force (USSF) Space Systems Command (SSC) and Combat Forces Command (CFC) Defensive Cyber Operations.
The Cloud Network Architect/Engineer provides technical leadership for the design, integration, security, and operation of cloud-based network architectures supporting Department of War (DoW) cyber operations and mission systems. This position architects secure connectivity across multiple cloud service providers, security classification levels, and mission environments while enabling scalable, resilient, and interoperable solutions.
The role works closely with Solution Architects, Cybersecurity Engineers, DevSecOps teams, Systems Engineers, and Government stakeholders to ensure cloud networking solutions align with enterprise architectures, Zero Trust principles, and DoW mission requirements. Rather than focusing solely on building isolated cloud infrastructures, the Cloud Network Architect/Engineer leverages enterprise cloud capabilities and Platform-as-a-Service (PaaS) offerings to integrate mission systems where operational data already resides, reducing complexity while improving mission effectiveness.
Role and Responsibilities:
- Design and maintain secure cloud network architectures supporting mission systems operating across multiple AWS environments, security classification levels, and Special Access Program (SAP) enclaves.
- Architect network connectivity between cloud, on-premises, tactical, and enterprise environments while ensuring secure movement of mission data across multiple security domains.
- Develop networking solutions that support both Red and Black network architectures while maintaining appropriate separation, protection, and accreditation requirements.
- Design and implement secure multi-domain networking solutions that enable mission applications to access data while complying with DoW Cross Domain Solution (CDS) requirements and security policies.
- Collaborate with enterprise cloud providers and government organizations to integrate mission capabilities into existing DoD cloud ecosystems and DevSecOps Platform-as-a-Service (PaaS) environments rather than duplicating infrastructure.
- Develop cloud networking strategies supporting hybrid and multi-cloud architectures while enabling interoperability across enterprise services.
- Design secure connectivity utilizing technologies including AWS Transit Gateway, Virtual Private Cloud (VPC), Direct Connect, VPN, software-defined networking (SDN), network segmentation, and cloud-native networking services.
- Support implementation of Zero Trust Architecture (ZTA) principles through network segmentation, identity-aware networking, least privilege access, and secure service-to-service communications.
- Architect enterprise data aggregation and Security Information and Event Management (SIEM) connectivity across multiple cloud environments to support cyber operations, monitoring, and situational awareness.
- Evaluate cloud networking technologies, enterprise services, and emerging capabilities to improve scalability, resiliency, and mission effectiveness.
- Ensure cloud networking solutions comply with DoD cybersecurity policies, Risk Management Framework (RMF), DISA Security Technical Implementation Guides (STIGs), and applicable reference architectures.
- Support systems engineering activities including architecture development, interface definition, technical reviews, integration planning, and operational transition.
- Develop architecture documentation including network diagrams, interface specifications, implementation roadmaps, and engineering design packages.
- Provide technical guidance to software developers, infrastructure engineers, cybersecurity engineers, and mission system teams regarding cloud networking best practices.
- Support troubleshooting of complex cloud networking, routing, latency, and connectivity issues across enterprise environments.
- Communicate clearly, concisely, and with technical accuracy-oral and written
Required:
- 10 years of experience designing, implementing, or supporting enterprise network architectures.
- Experience designing cloud networking solutions within AWS or other commercial cloud providers.
- Demonstrated experience supporting Department of Defense/War information systems.
- Experience designing secure network architectures supporting multiple security classification levels.
- Knowledge of Red/Black network architecture principles.
- Experience with enterprise routing, switching, firewalls, VPNs, DNS, PKI, load balancing, and network segmentation.
- Experience implementing Zero Trust networking concepts.
- Familiarity with Cross Domain Solutions (CDS).
- Understanding of DoD cybersecurity requirements including RMF, NIST 800-53, DISA STIGs, and DoD Cloud Computing Security Requirements Guide (SRG).
Desired:
- Experience supporting DoD cloud environments at Secret, Top Secret, or SAP levels.
- Experience integrating with enterprise DevSecOps platforms such as Platform One, Space CAMP, or other DoD enterprise PaaS environments.
- Experience designing hybrid cloud or multi-cloud architectures.
- Familiarity with software-defined networking (SDN) and Infrastructure as Code (IaC).
- Experience integrating enterprise SIEM platforms and cloud log aggregation architectures.
- Knowledge of software development environments supporting Agile and DevSecOps.
- AWS Advanced Networking Specialty, AWS Solutions Architect, Cisco CCNP/CCIE, or comparable cloud networking certifications.
Education Requirements:
- Computer Engineering, Computer Science, Information Technology, Network Engineering, Cybersecurity. With Bachelor’s, minimum 18 years’ experience; with Master’s, minimum 10 years’ experience
Clearance Requirements:
- Top Secret Clearance with SCI eligibility required
The pay range for this position in Colorado is $165,000/year to $200,000/year; however, base pay offered may vary depending on established government contract ranges, job-related knowledge, skills, and experience, and other factors. MTSI also offers a full range of medical, financial, and other benefits, dependent on the position offered. Base pay information is based on market location. Applications will be accepted on an ongoing basis. This posting will be renewed periodically until the position is filled.
#LI-MW2
#MTSI