• Lead the design, implementation, and optimization of enterprise wired and wireless networks, ensuring scalability, security, and high availability • Own and maintain network connectivity between branch offices around the world, partnering with global teams to standardize architecture and operations • Manage and ensure the reliable operation of remote access systems (VPN), including capacity planning, resiliency, and continuous improvements • Deploy, maintain, and continuously improve automation and monitoring tools; define best practices and drive automation-first operations • Diagnose and resolve complex network issues, including cross-region and cross-provider incidents; perform root cause analysis and implement preventative measures • Test, evaluate, and introduce new equipment and emerging technologies; contribute findings and recommendations into global R&D streams • Collaborate with telecom service providers globally; lead escalations, manage SLAs, and drive service improvements

Role Description We are looking for a Principal Cloud Network Architect to support a large-scale network and infrastructure consolidation program following the acquisition of 5+ telecommunications and UCaaS companies. The current cloud environment is highly fragmented, spanning 40+ AWS accounts, isolated VPC architectures, and multiple legacy on-premises data centers. This is a 6-8 month design engagement focused on defining the definitive target-state hybrid cloud routing fabric. The scope includes leveraging AWS Cloud WAN and Transit Gateway alongside Digital Realty interconnect capabilities and delivering production-ready blueprints to the core engineering organization. The role operates in close collaboration with the Lead Network Convergence Architect, ensuring seamless integration between cloud edge routing and the global MPLS/BGP/SD-WAN core. Responsibilities: - Architect the global cloud transit backbone by evaluating and defining the target-state AWS multi-account routing model, including a final design decision between AWS Cloud WAN and regional Transit Gateway (TGW) architectures to unify 40+ AWS accounts. - Design the hybrid interconnect fabric across physical and cloud environments, including Layer 2/Layer 3 connectivity between legacy data centers and AWS using Digital Realty (PlatformDIGITAL / ServiceFabric) and AWS Direct Connect. - Define the cloud-native security perimeter and identity access by engineering AWS WAF, AWS Shield Advanced, and centralized logging, while replacing raw credential management with AWS KMS/Secrets Manager and integrating AWS IAM with Entra ID for SSO. - Standardize cloud routing boundaries for e-commerce and voice workloads, specifically architecting a split-routing model: securely steering SIP signaling through AWS while strictly keeping real-time RTP media on physical hardware to eliminate cloud latency and "noisy neighbor" impacts. - Deliver a transition blueprint including Infrastructure-as-Code (IaC) migration templates and phased rollout strategy to enable migration from the current fragmented state to a unified cloud fabric without disruption to voice or e-commerce services. - Drive strategic Cloud FinOps and architecture economics by auditing existing AWS spend, executing compute right-sizing, and implementing Reserved Instances and Savings Plans alongside structural cloud changes. Qualifications - 8+ years in IT infrastructure/architecture, with 5+ years of focus on AWS-native networking, multi-account transit architectures, and hybrid cloud convergence. - Advanced AWS networking expertise, including AWS Cloud WAN, Transit Gateway, Direct Connect, VPC Lattice, Route 53, and cross-account governance (IAM / Resource Access Manager). - Strong "Hybrid BGP Fluency" (AS-PATH, MED, Local Pref) to act as the cloud-side counterpart to core network engineers, seamlessly accepting route handoffs at AWS Direct Connect or Microsoft Meet-Me Room edges without creating routing loops. - Deep expertise in AWS-native security perimeters (AWS WAF, Shield Advanced, GuardDuty, Security Hub) and enterprise identity federation. - Proven track record designing cross-region AWS Disaster Recovery (DR) architectures and executing Cloud FinOps cost-optimization strategies. - In-depth knowledge of Infrastructure as Code using Terraform and AWS CloudFormation for large-scale network and routing automation. - Experience in M&A cloud consolidation, including unifying fragmented or “shadow IT” AWS environments into enterprise-grade governance models. Benefits - Culture of relentless performance: join an unstoppable technology development team with a 99% project success rate and more than 30% year-over-year revenue growth. - Competitive pay and benefits: enjoy a comprehensive compensation and benefits package, including health insurance, language courses, and a relocation program. - ForeverRemote work culture: make the most of the flexibility that comes with remote work. - Growth mindset: reap the benefits of a range of professional development opportunities, including certification programs, mentorship and talent investment programs, internal mobility, and internship opportunities. - Global impact: collaborate on impactful projects for top global clients and shape the future of industries. - Welcoming multicultural environment: be a part of a dynamic, global team and thrive in an inclusive and supportive work environment with open communication and regular team-building company social events. - Social sustainability values: join our sustainable business practices focused on five pillars, including IT education, community empowerment, fair operating practices, environmental sustainability, and gender equality.

Role Description We are seeking a Network Architecture & Discovery Lead to command the technical intake and discovery phase of a massive network consolidation program. Following a series of telecommunications acquisitions, this role owns the pipeline that translates complex, semi-structured legacy network data into validated, target-state architectural baselines. The position leads a specialized team of ETL data analysts, an infrastructure simulation engineer, and network technicians. Acting as the bridge between technical reality and executive business requirements, the role governs the "Definition of Ready," ensuring legacy environments are fully mapped, classified, and architecturally sound before being handed over to the migration factory for execution. This role requires a minimum 5-hour daily overlap with EST (Eastern Standard Time) to support collaboration with global stakeholders. Responsibilities - Direct the upstream data team to extract, normalize, and validate legacy network configurations from acquired companies, hunting for IP conflicts and hardware limitations. - Analyze complex, custom-designed legacy networks and map them to our standardized target-state architectural archetypes. - Lead targeted interviews with client SMEs to determine if complex routing or firewall configurations are driven by strict regulatory mandates (PCI-DSS, HIPAA, SOC 2) or historical design choices. - Write and maintain the Master Requirements Document, locking the technical scope and delivery baseline for the migration execution teams. - Consolidate fragmented discoveries into centralized executive dashboards, providing the PMO and client leadership with a single pane of glass for technical debt and migration readiness. Qualifications - 7+ years of experience as an Enterprise Network Architect, Solutions Architect, or Technical Lead in complex telecom, ISP, or M&A network environments. - Must deeply understand enterprise networking concepts (BGP, OSPF, SD-WAN, Firewalls, SIP) to challenge local engineers and translate technical debt into business risk. (Active or expired CCNP is a strong plus). - Proven ability to interview technical SMEs, extract business requirements, and translate them into formal architecture blueprints using Visio or Lucidchart. - Experience governing technical intake pipelines and managing dependencies using tools like Jira and Confluence. Benefits - Culture of relentless performance: join an unstoppable technology development team with a 99% project success rate and more than 30% year-over-year revenue growth. - Competitive pay and benefits: enjoy a comprehensive compensation and benefits package, including health insurance, language courses, and a relocation program. - ForeverRemote work culture: make the most of the flexibility that comes with remote work. - Growth mindset: reap the benefits of a range of professional development opportunities, including certification programs, mentorship and talent investment programs, internal mobility, and internship opportunities. - Global impact: collaborate on impactful projects for top global clients and shape the future of industries. - Welcoming multicultural environment: be a part of a dynamic, global team and thrive in an inclusive and supportive work environment with open communication and regular team-building company social events. - Social sustainability values: join our sustainable business practices focused on five pillars, including IT education, community empowerment, fair operating practices, environmental sustainability, and gender equality.

Title: Network Firewall Engineer Location: Washington United States Job Description: The Opportunity: Are you looking for a career-defining opportunity to share your expertise in designing, developing, and implementing innovative network security solutions to support our country's critical infrastructure and fortify our nation's digital defenses? As a systems security and next-generation firewall engineer, you will be responsible for the enterprise-wide deployment of the Palo Alto Networks Security Operating Platform and its associated Panorama management framework. We need your experience to oversee the development and implementation of advanced security solutions to deliver robust threat prevention and improve the overall enterprise security posture. On our team, you'll supervise and mentor a team as they troubleshoot and analyze complex network challenges for customers using your deep knowledge of Palo Alto's key security features, including App-ID, User-ID, Threat Prevention, and GlobalProtect. You'll manage the research on new technologies and market trends to further develop and refine our security solutions and ensure continuous alignment with the evolving threat landscape. In this role, you'll closely impact mission success, protecting data and networks from malicious payloads and actors. With mentoring, challenging hands-on problem-solving, and opportunities to learn new tools and skills, we focus on growing as a team to make the best solutions for our customers. Work with us as we secure and protect our nation's most sensitive capabilities. What You'll Work On: - Develop relationships quickly and easily with other teams, communicating the complexities of security with a wide variety of audiences, including senior management. - Manage infrastructure and cybersecurity controls, including enhanced detection and vulnerability capabilities and improved event correlation in large enterprises. - Lead risk and vulnerability assessments in network, system, and application areas, and leverage big data analytics and traditional security event types to identify advanced threats or indicators of compromise. Join us. The world can't wait. You Have: - Experience configuring, managing, and optimizing network firewalls - Experience with multi-domain architectures, including data center, WAN, and LAN in virtualized architectures - Active TS/SCI clearance; willingness to take a polygraph exam - HS diploma or GED and 7+ years of experience supporting IT projects and activities, Associate's degree and 5+ years of experience supporting IT projects and activities, Bachelor's degree and 3+ years of experience supporting IT projects and activities, or Master's degree and 1+ years of experience supporting IT projects and activities - DoD 8570 IAT Level II Certification such as Security+ CE, CCNA-Security, or GSEC Certification - Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support (CSSP-IS) Certification such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification, within 30 days of start date Nice If You Have: - Experience configuring, managing, and optimizing Palo Alto firewalls directly and via Panorama - Experience with Linux OS administration and management - Knowledge of building and maintaining SolarWinds NPM and IPAM - Ability to be a self-starter, work without considerable direction, and work with a team - Possession of excellent verbal and written communication skills, including coordinating efforts and establishing customer relations Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $99,000.00 to $225,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided. Work Model Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings. - Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility. - Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility. - Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.