Network Defense Design Engineer Senior

Leidos•Quantico, VA

1d•$107,900 - $195,050

About The Position

Leidos is hiring a Network Defense Design Engineer Senior in Quantico, Virginia, to join its SMIT program. The role assists the Government Lead with daily network defense engineering activities, including designing, implementing, integrating, administering, maintaining, and optimizing enterprise cybersecurity systems and infrastructure. The engineer develops and integrates cybersecurity architectures, security controls, and defensive mechanisms into enterprise information systems to meet Department of Defense, Navy, and Marine Corps security requirements. The Leidos team delivers the core backbone of the Service, Management, Integration and Transport (SMIT) program, including cybersecurity services, network operations, service desk, and data transport. The program supports network modernization to provide Sailors, Marines, and the civilian workforce with tools to improve efficiency and strengthen naval capabilities.

Requirements

Bachelor’s degree in computer science, MIS, business, cybersecurity, information technology, or a related field.
At least 10 years of relevant experience in network defense engineering, cybersecurity architecture, information assurance, security systems integration, or enterprise cybersecurity operations.
U.S. citizenship and an active DoD Secret security clearance.
IAT Level III certification in accordance with applicable DoD requirements.
ITIL Version 3 Foundation certification.
Extensive experience designing, implementing, integrating, and maintaining enterprise network defense architectures and cybersecurity technologies.
Hands-on experience with SIEM solutions, including McAfee SIEM or comparable enterprise security monitoring platforms.
Experience with intrusion detection and prevention technologies, including McAfee IPS, host-based security solutions, and network security sensors.
Experience designing and integrating NAC solutions, endpoint security technologies, and enterprise access enforcement mechanisms.
Experience using ACAS or comparable vulnerability assessment and network scanning technologies.
Ability to develop technical documentation, evaluate network defense architecture alternatives, and communicate engineering recommendations to technical teams and Government stakeholders.

Nice To Haves

Advanced cybersecurity certification such as CISSP, CISM, or equivalent.
Experience supporting MCEN, NMCI, or comparable DoD enterprise networks.
Experience designing and integrating enterprise security monitoring architectures, including centralized logging, SIEM, network sensors, and event correlation platforms.
Experience with McAfee IPS, McAfee SIEM, HBSS, and other DoD-approved endpoint and network defense technologies.
Experience integrating NAC, vulnerability assessment, and endpoint compliance solutions into large-scale enterprise networks.
Familiarity with DoD cybersecurity policies, RMF, STIGs, and network security compliance requirements.
Experience with Navy/Marine Corps, DISA, and Joint network interoperability requirements.
Experience supporting cybersecurity readiness activities, enterprise defensive measures, and Government-directed security posture changes.
Experience designing and implementing PKI, certificate-based authentication, AD security, and enterprise IAM solutions.
Experience supporting network defense modernization, cybersecurity migrations, and large-scale security infrastructure integration projects.
Experience developing security architecture documentation, implementation plans, technical assessments, and cybersecurity remediation strategies.
Strong understanding of CND principles, including intrusion detection, event correlation, packet inspection, network monitoring, and incident response.
Experience integrating HBSS, device control modules, content filtering, and other enterprise cybersecurity technologies.
Experience with Microsoft AD, LDAP, directory services replication, and enterprise identity management.
Experience implementing PKI, certificate-based authentication, and multifactor authentication in enterprise environments.
Strong understanding of network protocols, routing, LAN technologies, application ports, and network security controls.
Experience developing and implementing COOP, DR, backup, and system recovery solutions.
Experience supporting DoD cybersecurity compliance activities, including security assessments, vulnerability remediation, and POA&Ms.

Responsibilities

Design, develop, and implement enterprise network defense solutions that protect information systems and network resources.
Design, implement, and maintain enterprise SIEM solutions for centralized logging, event correlation, detection, investigation, and reporting.
Integrate logging, network forensics, intrusion detection, and intrusion prevention capabilities to strengthen monitoring and incident response.
Design and implement the Enterprise Services portion of the Cybersecurity Sensor Grid, integrating intrusion, incident, and audit data from security technologies.
Engineer and integrate hardware-based security sensors into Navy and Marine Corps enterprise architectures.
Develop security monitoring solutions for packet capture, deep packet inspection, customized intrusion detection signatures, and network traffic analysis.
Configure and integrate CND mechanisms, including anti-spam technologies, NAC, HBSS, intrusion prevention, and host-based device control.
Integrate intrusion prevention and security event monitoring solutions using McAfee IPS, McAfee SIEM, and other Government-approved technologies.
Design, implement, and maintain NAC solutions for device authentication, endpoint compliance, access authorization, and network policy enforcement.
Integrate ACAS or other vulnerability assessment and network scanning technologies to identify vulnerabilities and support remediation.
Plan and implement cybersecurity measures in accordance with CYBERCON and Government-directed defensive requirements.
Develop and maintain cybersecurity policies, technical security plans, procedures, and configuration standards.
Assist with IAM requirements, including role-based access controls, privileged account management, and enterprise authentication.
Design and integrate PKI, certificate-based authentication, and two-factor authentication for AD accounts, network devices, and enterprise applications.
Configure and integrate Microsoft AD and LDAP services for secure authentication and authorization.
Monitor, troubleshoot, and optimize directory service replication, authentication, and supporting infrastructure.
Oversee Rights Management Services for administrators, users, and groups to ensure appropriate permissions and policy compliance.
Design and integrate cybersecurity solutions for application ports and protocols, IA requirements, routing, and LAN connectivity.
Develop, maintain, and execute COOP and DR plans, including backups, restoration procedures, and operational recovery requirements.
Support information system security assessments, certification and authorization activities, and compliance validation.
Develop and manage POA&Ms to document security deficiencies, track corrective actions, and support compliance and risk management.
Perform cybersecurity architecture assessments, configuration reviews, integration testing, verification, and validation.
Ensure network defense designs and implementations support Navy, Marine Corps, DISA, and Joint interoperability requirements.
Plan, coordinate, and execute cybersecurity system upgrades, migrations, integrations, and modernization while minimizing disruption.
Maintain technical documentation, architecture diagrams, implementation plans, configuration baselines, SOPs, and engineering recommendations.
Provide senior-level technical expertise and recommendations to Government stakeholders and engineering teams.