Apply on Employer Site

Los Alamos National Laboratory · 16 hours ago

Solutions Architect 4

Los Alamos, NM

Full-time

Onsite

Senior Level, Lead/Staff

12+ years exp

Los Alamos National Laboratory (LANL) is a multidisciplinary research institution engaged in strategic science on behalf of national security. They are seeking a Solutions Architect 4 to serve as the primary network architect for critical classified networks, responsible for implementing next-generation routing and switching to protect national security systems and ensure compliance with cybersecurity frameworks.

Security

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Architecting, provisioning, deploying, and maintaining compliant and accredited network infrastructure

Leading remote and local site deployments and extensions of classified networks, including integration with project managers and a variety of both LANL-internal and external stakeholders to establish requirements, timelines, budgets, resource utilization, and implementation best-practices for accredited network infrastructure

Integration with peer networking and compliance teams, including Cybersecurity and COMSEC, to develop secure and compliant solutions meeting well-defined IC requirements

Highest-tier escalation of IT issues and problems spanning multiple disciplines, including embedded systems, Linux, and Windows, focused on issues within the network stack (including at the software level)

Directing network architecture management activities and monitoring

Leading architecture design reviews and contributing to enterprise-wide cybersecurity and networking strategy

Providing technical leadership through mentorship and technical oversight of junior staff (NP-1 - NP-4)

Representing LANL networking requirements in interagency and stakeholder engagements, including with DOE-IN Routerheads and OGAs

Qualification

Cisco routingSwitchingSecure network deploymentsVulnerability managementNetwork architecture managementSecure systems engineeringChange managementFirewall implementationsTeam-buildingTechnical innovationTechnical certificationsSecurity certificationsLeadershipMentorshipCommunication skillsProject management

Required

Extensive experience managing networking equipment in both SCIF and SAPF environments for sponsors with varying requirements and implementation preference

Expert-level knowledge of Cisco routing and switching for LAN, WAN, and data fabric implementations within an accredited context

Expert-level knowledge of secure network deployments

Experience with router and switch hardening to STIG

Proven ability to lead and execute complex deployments of networks to both local and remote-managed sites

Experience participating in change management for accredited systems

Deep understanding of secure systems engineering and cybersecurity principles

Mastery of vulnerability management for networking equipment

Ability to lead multidisciplinary teams and effectively manage competing priorities in high-consequence environments

Expert knowledge and demonstrated application of current and future network, telecommunication, data management, security, hardware, software development, and systems programming technologies, how they interoperate, and how to architect complex solutions

Demonstrated excellent written and oral communication skills, organizational and project management skills

Demonstrated team-building experience with technologists

Position requires a bachelor's degree and 12 years of related experience or an equivalent combination of education and experience directly related to the occupation. At this level, advanced professional certification or postgraduate study is expected

Preferred

Routerhead: DOE-IN appointed expert trusted with implementation of JWICS-facing switches and routers on accredited networks

COMSEC: Experience configuring and deploying HAIPEs / taclanes

Secure Systems Integration: Knowledge of firewall implementations (Palo Alto), IPS / IDS (Cisco), cross-domain solutions (CDS), data flow protections for classified workloads, and secure VOIP (CUCM)

Leadership and Mentorship: Proven experience mentoring technical staff, leading teams, and managing cybersecurity projects in mission-critical environments

Technical Innovation: Demonstrated ability to identify, evaluate, and deploy emerging networking tools and technologies

Education: Graduate degree in Cybersecurity, Engineering Management, Networking, or Systems Engineering preferred

Technical Certifications: CCNP, ITIL, TACLANE Encryptor Operator preferred

Security Certifications: Security+, CISSP, CAP, CISM, or comparable professional cybersecurity certification preferred

Clearance: Active DOE Q or DoD Top Secret clearance with SCI eligibility