• Designs secure, segmented network architectures supporting regulated and controlled workloads including enclave topologies, trust boundaries, routing domains, and isolation mechanisms to protect in scope systems.
• Designs, configures, and maintains enterprise firewalls in support of approved network architectures, implementing segmentation rules, controlled access paths, and traffic enforcement consistent with documented security requirements.
• Designs, deploys, and maintains Web Application Firewall (WAF) solutions to protect applications hosted within regulated or externally exposed environments, ensuring traffic inspection and rule enforcement align with approved architectures.
• Translates documented technical requirements into practical network, firewall, and WAF configurations, without responsibility for policy definition, control ownership, or audit determinations.
• Engineers and maintains controlled connectivity between regulated enclave networks and approved enterprise, research, or external systems, minimizing attack surface while supporting operational needs.
• Develops and maintains architecture documentation
  • Including network diagrams, firewall and WAF design artifacts, and data flow representations
  • Used to support operational clarity and compliance evidence collection.
• Perform other duties as assigned.

Associate's degree in Information Systems or a related field and ten (10) years of related experience required. Work experience may substitute for education requirement.

Experience necessary for success: Five (5+) years of progressively responsible experience in enterprise network engineering or network architecture roles. Experience designing, integrating, or supporting cloud-based networking constructs (e.g., virtual networking, VNet/VPC design, hybrid connectivity). Demonstrated experience designing and supporting segmented or security sensitive network environments.

Preferred:

• Experience supporting environments subject to regulatory frameworks such as CMMC, NIST SP 800 171, or similar
• Experience designing or supporting isolated or enclave-based network architectures
• Experience in higher education, research computing, healthcare, or government adjacent environments
• Experience working within or supporting regulated cloud environments such as Microsoft Azure Government (GCC/GCC High) or AWS GovCloud (or equivalent)

Preferred Technical Skills:

• Familiarity with network monitoring, logging, and visibility tools used in regulated environments
• Experience with secure remote access, VPNs, or controlled inter network connectivity
• Exposure to hybrid networking models integrating on-premises infrastructure with cloud environments (e.g., Azure VNets, AWS VPCs, private connectivity)
• Familiarity with cloud-native networking controls, segmentation, and security constructs in regulated environments

Preferred Skills:

• Strong expertise in enterprise routing and switching, including core, distribution, and access layer design
• Hands on experience designing and configuring enterprise firewalls (e.g., Palo Alto, Fortinet, Cisco, or similar platforms)
• Experience deploying or supporting Web Application Firewall (WAF) technologies
• Experience producing network architecture documentation, diagrams, and data flow artifacts suitable for audits or assessments
• Ability to translate documented security or compliance requirements into practical, supportable network designs
• Ability to work collaboratively across network, security, compliance, and research computing teams
• Ability to explain complex network designs clearly to both technical and non-technical stakeholders.
• Certifications CCNP, CISSP, Security+ certifications are a plus, but not required.