SRE Transport – VPN/Firewall

Leidos • Norfolk, VA

6d • $87,100 - $157,450

About The Position

Leidos is hiring a Firewall, VPN (Virtual Private Network) and DMZ (Demilitarized Zone) Network Engineer for its Service Management, Integration and Transport (SMIT) Contract. The role supports the United States Navy’s SMIT mission and the Navy-Marine Corps Intranet (NMCI), providing network engineering expertise for a large global network. The engineer designs, implements, operates, secures, and maintains network security solutions and appliances, including enterprise-grade Juniper firewalls, DMZ environments, VPNs, and Cisco network appliances.

As a member of the Transport Operations technical team, the engineer works with engineering, project management, network operations, administration, and other stakeholders. The role supports customer relationships and resources for Incident Response, Change Management, Problem Management, Operations and Maintenance (O&M), ITSM, and DevSecOps initiatives. It also provides Tier III technical support and contributes to service improvements, network upgrades, maintenance, and operational integrity.

Requirements

• B.S. degree and 8–12 years of prior relevant experience; work experience may be substituted for the degree at the Hiring Manager’s discretion.
• U.S. citizenship and an active DoD Secret security clearance.
• An active DoD 8570.01 IAT Level III certification, such as CCNP Security, CISSP, or CASP+.
• An active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks.
• Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols such as BGP, OSPF, and IS-IS, switching protocols such as Spanning Tree Protocol, VLANs, LLDP, and VoIP, multicast protocols, and emerging network technologies.
• Strong understanding and in-depth knowledge of IP network and subnet addressing.
• Extensive knowledge of defense-in-depth principles, network architecture, modern network topologies, network appliance integrity, and common networking security elements.
• Experience with Ansible, Python, and infrastructure-as-code network automation.

Responsibilities

• Provide VPN, DMZ, and firewall network engineering subject matter expertise for United States Navy current operations and the NMCI network.
• Modify, operate, integrate, maintain, secure, and implement services for the as-fielded NMCI network.
• Collaborate with the Network Operations Center, Network Administrators, and Network Engineering Team to define or improve network security appliances, test and validate automation, insert best practices, develop network SOPs/TTPs, drive continuous service improvements, tune system performance, and create and maintain Engineering Implementation Plans.
• Plan and execute network upgrades and maintenance with the NMCI Operations Manager, NOC Lead, Release Management team, and other stakeholders.
• Provide Tier III escalation support and engage vendors for Incident Management activities.
• Participate in Root Cause Analysis for Problem Management activities.
• Provide Tier III operational support to NOC watch staff as a network subject matter expert.
• Perform highly technical maintenance and configuration of firewalls, VPNs, and DMZ appliances.
• Participate in the Transport Operations team’s on-call rotation and be available for off-hours work or call-ins to support customer mission requirements.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior