Network Engineer - WAN - 2nd Shift

Leidos • Hampton, VA

2d • $59,150 - $106,925 • Onsite

About The Position

Leidos is seeking a cleared Wide Area Network (WAN) Engineer to engineer, operate, and sustain long-haul transport and routing infrastructure across Department of Defense networks. The role supports enterprise WAN routing troubleshooting from the watch floor and is accountable for the availability, performance, and STIG compliance of circuits that support operational mission traffic worldwide.

This position requires daily on-site work at Langley AFB, Virginia. Core hours are typically 4:00 PM to 12:00 AM, with willingness to work evening and rotational shifts. Occasional CONUS/OCONUS travel may be required.

Requirements

• U.S. citizenship and an active Top Secret clearance, with the ability to obtain SCI before the start date.
• Bachelor’s degree and at least 2 years of experience, or a master’s degree and at least 1 year of experience; additional experience may be considered in lieu of a degree.
• At least 2 years of hands-on enterprise WAN engineering and operations experience, including demonstrated ownership of multi-site routed transport in a DoD environment.
• DoD 8570/8140 IAT Level II certification, such as Security+ CE or equivalent.
• Ability to configure and troubleshoot eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs.
• Ability to tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending.
• Experience establishing and sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers.
• Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation.
• Proficiency with OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations.
• Hands-on administration of Cisco IOS-XE, IOS-XR, and NX-OS and Juniper Junos routing platforms in a production operational network.
• Experience with Type 1 inline network encryptors, including TACLANE/KG-175 and HAIPE, and DISA circuit lifecycle actions such as TSR/TSO and DISA Direct/SNAP.
• Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes.
• Packet-level troubleshooting skills using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments.
• Willingness to work evening and rotational shifts, including weekends and holidays; occasional CONUS/OCONUS travel may be required.

Nice To Haves

• Active CCNP Enterprise, JNCIP-SP, or equivalent routing certification is preferred.
• CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III certification, such as CASP+ or CISSP.
• Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.
• Hands-on experience with Cisco SD-WAN, Juniper SD-WAN, or comparable overlay transport in a DoD/DoW deployment.
• Proficiency with Python and Ansible for configuration deployment, compliance auditing, and network state validation.
• Familiarity with JRSS, DODIN operations, and DoD boundary/CDS architectures.
• Working knowledge of DWDM, SONET/SDH, and carrier Ethernet handoffs supporting long-haul circuits.

Responsibilities

• Maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.
• Execute circuit installations, migrations, bandwidth upgrades, and site cutovers using documented rollback plans and minimizing mission impact.
• Develop and maintain routing policy standards, IP address and ASN allocation plans, and authoritative network documentation, including logical and physical topology diagrams.
• Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.
• Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule and validate maintenance actions and restore outages.
• Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.
• Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.
• Troubleshoot enterprise WAN issues from the watch floor and support the availability and performance of operational mission circuits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level