Overview
In this role you will lead the design and evolution of secure multi-cloud networking (AWS, Azure, GCP, OCI) for DoD environments, translating mission and security requirements into scalable architectures. You will set technical standards, patterns, and automation to reduce CSP complexity while ensuring security, availability, and compliance. You’ll collaborate with cloud engineering, cybersecurity, and program leadership to deliver resilient connectivity across Cloud One and DoD networks, shaping enterprise networking for mission success.
Pay / Benefits
- 401(k) retirement plan
- comprehensive medical/dental/vision coverage
- tuition reimbursement
- flexible work schedules for work/life balance
Responsibilities
- Design and maintain enterprise multi-cloud networking architectures across AWS, Azure, GCP, and OCI
- Develop reusable reference architectures, design patterns, and standards for cross-CSP consistency
- Architect secure cross-cloud connectivity including VPNs, private circuits, cloud interconnects, and SDN
- Define routing, IPAM, segmentation, and trust-boundary strategies for multiple environments
- Partner with cybersecurity to implement Zero Trust, encryption, and traffic inspection
- Design highly available, fault-tolerant networks with DR and continuity plans
- Define IaC provisioning using Terraform and Ansible within GitLab CI/CD workflows
- Establish network observability, monitoring, and troubleshooting across CSPs
- Review network changes for compliance with standards and enterprise objectives
- Provide technical leadership and governance across cloud, network, cybersecurity, DevSecOps, and operations
- Evaluate cloud networking technologies to improve scalability, security, and automation
- Produce architecture diagrams, interface definitions, and implementation guidance
Key requirements
- Bachelor’s degree in a technical discipline and 12–15 years of relevant experience, or equivalent.
- Extensive enterprise-scale network architecture experience (routing, switching, firewalls, DNS, VPNs, private connectivity, segmentation).
- Multi-cloud design experience across at least two CSPs (AWS, Azure, GCP, OCI).
- Advanced cloud networking knowledge (VPC/VNet, transit, peering, private endpoints, cloud-native firewalls, NAT, DNS, private connectivity).
- Strong TCP/IP and routing knowledge (BGP, CIDR, IPAM).
- Solid understanding of network security, Zero Trust, firewalls, encryption, traffic inspection.
- Hybrid connectivity experience (Direct Connect, ExpressRoute, Interconnect, FastConnect, IPsec VPNs).
- Automation & IaC experience (Terraform, Ansible, GitLab CI/CD).
- High availability design across AZs/regions and DR planning.
- DoD/federal/regulatory environment experience (RMF, STIGs, NIST controls) and secure enclaves.
- Ability to translate complex architectures into clear recommendations for engineers, cybersecurity, and government customers.
- Eligibility to obtain DoD Secret clearance
- Technical communication
- Collaborative leadership
- Decision-making under security constraints
- Terraform
- Ansible
- GitLab CI/CD
Security Architect in Bedford employer: Leidos
Leidos is an exceptional employer, offering a collaborative culture that prioritises employee growth and work-life balance. With a strong commitment to diversity and inclusion, employees are empowered to develop their skills through technical academies and career development plans, all while contributing to meaningful projects that enhance public sector services in London. The comprehensive benefits package, including a contributory pension scheme and flexible working options, further underscores Leidos' dedication to attracting and retaining top talent.
