Overview

NETWORK ARCHITECT (RDTE)

Bowhead is seeking a highly skilled and cleared Network Architect to support our RDT&E (Research, Development, Test, and Evaluation) contract in Dahlgren, VA. The ideal candidate will be instrumental in the design, implementation, and management of robust network topologies, with a strong focus on modern network automation and security frameworks. This role requires deep expertise in Cisco architectures, enterprise-scale network management, and next-generation security implementations.

Responsibilities

Core Responsibilities:

Analyze, design, and develop network architectures, including hardware/software identification, performance analysis, and network modifications.
Manage complex routing and switching environments, including inner router configurations, BGP, route leaking, and VRF builds.
Automate the provisioning of new switches and troubleshoot LAN automation issues.
Assist in the configuration and troubleshooting of VMware NSX firewall policies and virtual routing.
Identify connectivity issues spanning copper wiring, fiber path analysis, optical transceivers, and wireless devices.
Install, maintain, and secure network devices across multiple separated network environments.
Monitor system logs (using tools like Splunk or QRadar) to ensure optimal operating environments and proactive threat hunting.
Manage and upgrade environmental monitoring systems (e.g., APC StruxureWare) across multiple facility locations.
Collaborate closely with cross-functional RDT&E teams to resolve customer issues efficiently.

This position requires specialized knowledge and hands-on experience in the following strategic domains:

Cisco Catalyst Center (C2C): Lead the deployment, management, and assurance of network infrastructure using Catalyst Center (formerly DNA Center) for automated LAN deployments, lab building, and ongoing network telemetry.
Zero Trust (ZT) Architecture: Drive the organization's Zero Trust security model by implementing strict access controls, micro-segmentation, and continuous monitoring to ensure secure connectivity across all endpoints and environments.
Cisco ISE (Identity Services Engine): Architect and manage Cisco ISE deployments. Responsible for creating identity groups, configuring authorization profiles, integrating with external identity stores, and maintaining server software to support seamless Zero Trust Network Access.
Software-Defined Access (SDA): Support the rollout and administration of SDA fabrics across classified and unclassified networks to streamline network provisioning and enforce security policies.

Qualifications

Eight or more (8+) years of experience in network engineering, IT, or other related fields preferred
Must have strong troubleshooting and critical thinking skills
Strong attention to detail, good documentation skills, ability to write clear, concise project reports
Ability to function with minimal instruction or supervision, or as a part of larger team reporting to formal project management
Must have a DoD 8570 Compliance (e.g., CompTIA CASP+ or Security+) required
Must have a Cisco Certified Network Associate (CCNA) or higher Cisco certification required
Must obtain Cisco Certified Network Professional (CCNP) within 12 months of hire date.
Preferred VMware Certified Professional (VCP), AWS Certified Cloud Practitioner, ITIL v4.

Targeted salary range is $105,000 annually to $120,000 annually based on qualifications and experience.

Physical Demands:

Must be able to lift up to 10-15 pounds
Must be able to stand and walk for prolonged amounts of time
Must be able to twist, bend and squat periodically

SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Top Secret level. US Citizenship is a requirement for this contract.

#LI-JR1