Network Security Architect

Job ID: 111930
Location: Alexandria, Virginia  [Flex]
Category: App/Dev
Employment Type: Contract
Date Added: 02/02/2026

Apply Now

Fill out the form below to submit your information for this opportunity. Please upload your resume as a doc, pdf, rtf or txt file. Your information will be processed as soon as possible.


 
 
 
 
 
(Word, PDF, RTF, TXT)
* Required field.

Overview:
Our client is in need for a Network Security Architect, where you'll play a pivotal role in designing, implementing, and securing robust network solutions. This position offers an exciting opportunity to lead advanced security architectures, influence our cybersecurity posture, and collaborate with cross-functional teams to protect our critical infrastructure.

Key Responsibilities:

  • Application Delivery & Traffic Management:
    Design and oversee sophisticated traffic control solutions leveraging F5 Big-IP Local Traffic Manager (LTM). Responsibilities include developing and maintaining complex iRules, crafting custom health monitors, and configuring advanced persistence profiles to ensure optimal application availability and performance.

  • Web Application Security:
    Deploy, tune, and manage F5 Big-IP Application Security Manager (ASM) policies to defend web applications against OWASP Top 10 vulnerabilities, zero-day threats, and other emerging security risks. Continuously monitor and improve WAF configurations to adapt to evolving threat landscapes.

  • Secure Access & Authentication:
    Engineer secure remote and internal access solutions using F5 Big-IP Access Policy Manager (APM). Integrate multi-factor (MFA) and two-factor authentication (2FA) services to enforce robust user authentication and access controls.

  • Global Domain Name & DNS Services:
    Configure and manage F5 Big-IP DNS (GTM) for intelligent, geo-aware DNS resolution and global server load balancing (GSLB) across multiple data centers, ensuring high availability and responsiveness.

  • Infrastructure Integration & Optimization:
    Act as the primary liaison for integrating F5 solutions with perimeter security devices (Palo Alto, Cisco Firepower), DDI platforms (Infoblox), and enterprise monitoring tools. Facilitate seamless infrastructure workflows and automation.

  • SSL/TLS & Certificate Management:
    Oversee SSL/TLS traffic lifecycle management, including secure certificate implementation, inspection policies, and offloading SSL processing to optimize backend server performance.

  • Troubleshooting & Performance Tuning:
    Lead complex troubleshooting efforts with tools like Wireshark, TCPDump, Riverbed, and SolarWinds to diagnose application and network issues, ensuring high performance and availability.

  • Security Architecture & Compliance:
    Collaborate with security and network teams to design, implement, and enforce Zero Trust models and least privilege principles. Support PKI infrastructure and certificate-based authentication processes.

Qualifications:

  • Bachelor's degree in Computer Science, Cybersecurity, or related field, with 8+ years of experience, or equivalent professional experience (12+ years).
  • Active Secret clearance.
  • At minimum, Security+ certification aligned with DoD 8140 IAT Level II standards.

Required Skills and Experience:

  • Extensive hands-on expertise with the F5 Big-IP platform, including LTM, ASM, APM, and DNS modules.
  • Proficiency in developing and scripting iRules to customize traffic flow and enforce complex business logic.
  • Deep understanding of core protocols such as HTTP/S, DNS, SSL/TLS, TCP/IP, and experience performing detailed packet analyses.
  • Proven capability to integrate F5 solutions with external authentication systems (RADIUS, SAML, LDAP) supporting 2FA/MFA.
  • Strong background working with security infrastructure including Palo Alto NGFW, Cisco Firepower, and Infoblox DDI.

Preferred Skills & Certifications:

  • F5 Certified Administrator (F5-CA) or F5 Certified Technology Specialist (F5-CTS).
  • Experience automating F5 configurations using AS3, Declarative Onboarding, and iControl REST API.
  • Familiarity with F5 BIG-IQ for centralized management and analytics.
  • Hands-on experience with secure remote access solutions like Palo Alto GlobalProtect.
  • Knowledge of adjacent technologies such as SD-WAN (VERSA), FortiGate, Riverbed WAN Optimization, and network automation tools like NetBrain.

Publishing Pay Range: $50.00 – $60.00 Hourly