SRE Transport – VPN/Firewall

Leidos•Norfolk, VA

About The Position

Leidos is hiring a Firewall, VPN (Virtual Private Network) and DMZ (Demilitarized Zone) Network Engineer for its Service Management, Integration and Transport (SMIT) contract. The role supports the United States Navy’s NMCI network and is part of the Transport Operations team. The engineer provides network security expertise and designs, implements, operates, integrates, maintains, and secures network services for the as-fielded NMCI environment. Responsibilities include working with enterprise-grade Juniper firewalls, DMZ environments, VPN solutions, and Cisco network appliances, while collaborating with engineering, operations, project management, and other stakeholder teams. The role also supports customer relationships and Incident Response, Change Management, Problem Management, Operations and Maintenance, ITSM, and DevSecOps initiatives. The engineer provides subject matter expertise and Tier III operational support, helps improve network security appliances and operational practices, develops standard operating procedures and tactics, techniques, and procedures, and contributes to continuous service improvements and performance enhancements. The role plans and executes network upgrades and maintenance with operations and release-management stakeholders, provides escalation and vendor support for incident management, and participates in root cause analysis. The position requires a bachelor’s degree and 8–12 years of relevant experience, though work experience may substitute for the degree at the hiring manager’s discretion. The candidate must be a U.S. citizen with an active DoD Secret clearance, an active DoD 8570.01 IAT Level III certification, and an active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks. The employee must be able to work or be called in during off-hours and participate in an on-call rotation.

Requirements

Bachelor’s degree and 8–12 years of prior relevant experience; work experience may substitute for the degree at the hiring manager’s discretion.
U.S. citizenship and an active DoD Secret security clearance.
Current active DoD 8570.01 IAT Level III certification, such as CCNP Security, CISSP, or CASP+.
Current active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks.
Ability to work or be called in during off-hours to meet customer mission-support requirements.
Experience providing Tier III network subject matter expertise and support to NOC watch staff.
Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, BGP, OSPF, IS-IS, Spanning Tree Protocol, VLANs, LLDP, VoIP, multicast protocols, and emerging network technologies.
Strong understanding and in-depth knowledge of IP network and subnet addressing.
Extensive knowledge of defense-in-depth principles, network architecture, modern network topologies, network appliance integrity, and common networking security elements.
Experience with Ansible, Python, and infrastructure-as-code network automation.

Responsibilities

Provide VPN, DMZ, and firewall network engineering subject matter expertise for United States Navy current operations and the NMCI network.
Modify, operate, integrate, maintain, secure, and implement services for the as-fielded NMCI network.
Perform highly technical maintenance and configuration of firewalls, VPNs, and DMZ appliances.
Collaborate with the Network Operations Center, network administrators, and network engineering teams to improve network security appliances, validate automation and best-practice opportunities, develop network SOPs/TTPs, support continuous service improvements, and tune system performance.
Create and maintain Engineering Implementation Plans (EIPs).
Plan and execute network upgrades and maintenance with the NMCI Operations Manager, NOC Lead, Release Management team, and other stakeholders.
Provide Tier III escalation support and engage vendors in support of Incident Management activities.
Participate in root cause analysis for Problem Management activities.
Participate in the Transport Operations team’s on-call rotation and provide support during off-hours when required.
Manage customer relationships and contribute to Incident Response, Change Management, Problem Management, O&M, ITSM, and DevSecOps initiatives.