GovCIO is seeking a highly skilled Network Engineer with expertise in Zero Trust principles to design, enhance, and continuously mature the company’s next-generation network security architecture in support for Headquarters Air Force A2. This role is responsible for engineering frameworks, and implementation patterns that enable the Air Force Intelligence community to achieve a robust Zero Trust posture to support global operations.
This position will be located at Langley AFB in Hampton, VA and will be an onsite position.
Responsibilities:
Design and maintain the Air Force Intelligence Community’s Zero Trust network architecture, including segmentation models, micro-perimeters, secure access patterns, and continuous verification controls.
Partner closely with security, cloud, infrastructure, manufacturing, and application teams to ensure Zero Trust capabilities are integrated effectively across all environments.
Develop and document detailed architectural diagrams, standards, reference architectures, and engineering playbooks for Zero Trust network design.
Lead technical evaluations of network security technologies such as software-defined perimeter tools, identity-aware proxies, next-generation firewalls, network access control platforms, and Zero Trust network gateways.
Oversee the implementation of secure network connectivity for on-premises, hybrid, and cloud workloads, ensuring alignment with Zero Trust policies and identity-based access controls.
Assess current network architecture and identify gaps, risks, dependencies, and modernization opportunities as part of the Zero Trust roadmap.
Provide expert guidance to engineering teams during design reviews, solution development, and troubleshooting activities.
Establish network performance, reliability, and security KPIs to measure progress and ensure continuous improvement.
Stay current with Zero Trust frameworks, emerging threats, evolving technologies, and industry trends to guide future architectural evolution.
Qualifications:
High School with 9+ years (or commensurate experience)
Required Skills and Experience
Clearance Required: TS/SCI
Understanding of Zero Trust principles and experience applying them to network design.
Expertise with network technologies such as segmentation, SD-WAN, VPN alternatives, firewalls, NAC, DNS security, and secure access service edge (SASE).
Experience with cloud networking across Azure, AWS, or similar platforms.
DoD 8140 Level II (Sec+CE, SSCP, CND, CCNA Security, etc)
Preferred Skills and Experience
Experience in the Air Force Intelligence community
Familiarity with NIST SP 800-207, CISA Zero Trust Maturity Model, and other recognized guidance.
Demonstrated ability to collaborate across diverse teams and lead architectural decisions.
Strong analytical and documentation skills with the ability to communicate complex technical concepts clearly.