Cloud Network Architect at Decision Point Analytics

Job description

DecisionPoint seeks a Cloud Network Architect to design, secure, and optimize cloud network architectures within IL5 AWS GovCloud environments supporting a large federal and DoD-aligned mission environment. This role focuses on network segmentation, routing, DNS architecture, VPC/ VNet design, east-west traffic control, firewall policies, and secure boundary design aligned with Zero Trust principles. The Cloud Network Architect works closely with cloud platform engineers, cybersecurity teams, system administrators, and application architects to ensure resilient, compliant, and high-performing network infrastructure across enterprise cloud systems. This position is fully remote. The Cloud Network Architect will: • Design IL5-compliant cloud network architectures including VPCs, subnets, routing, and segmentation. • Implement network security controls aligned with Zero Trust, including east-west traffic filtering and micro-segmentation. • Develop and maintain DNS architecture, API routing flows, and secure naming conventions. • Architect secure cloud boundary protections including WAF, firewalls, and network access controls. • Lead configuration of VPN, Direct Connect, and cross-account networking for hybrid-cloud or multi-VPC connectivity. • Support traffic flow analysis, latency optimization, and performance tuning across cloud network layers. • Ensure network designs comply with RMF, STIGs, IL5 cloud security standards, and boundary defense requirements. • Troubleshoot complex network issues involving connectivity, DNS failures, load balancing, or segmentation errors. • Develop network diagrams, architecture documentation, and network policy standards. • Support monitoring and alerting implementations across network and connectivity components. • Participate in Change Control Board (CCB) processes for network modifications. • Provide guidance to engineering teams on cloud network patterns and operational impacts. Clearance Requirement Must hold an active Top Secret clearance , supported by a Tier 5 background investigation. Education (Required) Bachelor’s degree in Networking, Computer Science, Engineering, or a related technical field. Experience (Required) • Minimum 7 years of experience in cloud or enterprise network engineering. • Experience designing secure cloud network architectures including VPC/ VNet segmentation. • Experience with DNS, routing, firewalls, and secure boundary design. • Experience supporting IL5, federal, or DoD network environments. Technical Knowledge (Required) • Strong knowledge of AWS GovCloud networking services (VPC, NACLs, SGs, Transit Gateway, Route 53). • Experience with VPN, Direct Connect, and hybrid-cloud connectivity patterns. • Knowledge of Zero Trust network principles and east-west segmentation. • Familiarity with load balancers, WAF, and boundary defense tools. Technical Knowledge (Preferred) • Experience with network automation or IaC network configuration. • Experience with container networking, service mesh, or microservices connectivity. • Familiarity with cloud-native monitoring and packet analysis tools. Certifications Required: • CCNA or CCNP • CompTIA Security+ Preferred: • AWS Networking Specialty • ITIL v4 Foundation • Additional cloud network certifications Skills • Strong problem-solving and diagnostic abilities for complex network issues. • Excellent communication and collaboration skills across technical teams. • High attention to detail and documentation accuracy. • Ability to architect secure, scalable network solutions at enterprise scale. • Ability to manage change in a fast-paced mission environment. • EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws. • Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. • Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.

Requirements

Must-haves

This position is fully remote.
Design IL5-compliant cloud network architectures including VPCs, subnets, routing, and segmentation.
Implement network security controls aligned with Zero Trust, including east-west traffic filtering and micro-segmentation.
Develop and maintain DNS architecture, API routing flows, and secure naming conventions.
Architect secure cloud boundary protections including WAF, firewalls, and network access controls.
Lead configuration of VPN, Direct Connect, and cross-account networking for hybrid-cloud or multi-VPC connectivity.
Support traffic flow analysis, latency optimization, and performance tuning across cloud network layers.
Ensure network designs comply with RMF, STIGs, IL5 cloud security standards, and boundary defense requirements.
Troubleshoot complex network issues involving connectivity, DNS failures, load balancing, or segmentation errors.
Develop network diagrams, architecture documentation, and network policy standards.
Support monitoring and alerting implementations across network and connectivity components.
Participate in Change Control Board (CCB) processes for network modifications.
Provide guidance to engineering teams on cloud network patterns and operational impacts.
Clearance Requirement
Must hold an active Top Secret clearance , supported by a Tier 5 background investigation.

Nice-to-haves

Technical Knowledge (Preferred)
AWS Networking Specialty
ITIL v4 Foundation
Additional cloud network certifications
Strong problem-solving and diagnostic abilities for complex network issues.
Excellent communication and collaboration skills across technical teams.
High attention to detail and documentation accuracy.
Ability to architect secure, scalable network solutions at enterprise scale.
Ability to manage change in a fast-paced mission environment.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsapi

Platform: icims
Effort: medium