Senior Network Engineer

Leidos•Odenton, MD

16d•Onsite

About The Position

Leidos is seeking a Senior Network Engineer to join its Defense Enclave Services (DES) team at Ft. Meade, Maryland. The DES program supports DISA’s enterprise IT services through a large-scale discovery, design, and migration effort to consolidate Department of Defense IT services into a single service-provider model. The role supports discovery, analysis, design, and network migration activities to move DoD agencies into the modernized DoDNet environment. The engineer plans and designs secure enterprise network solutions, assesses legacy environments, develops architectures using approved design patterns, and supports connectivity, access, capacity, performance, and security requirements. The role also includes developing migration and transition plans, supporting IPv4 and IPv6 addressing, and working with information assurance teams on DoD compliance and accreditation artifacts. An active Secret clearance is required before starting, and the candidate must be able to obtain a Top Secret clearance. U.S. citizenship is required.

Requirements

Bachelor’s degree and at least 8 years of relevant experience; specific experience, education, and training may be considered in lieu of a degree.
Active DoD Secret security clearance before starting; must be able to obtain a Top Secret clearance.
U.S. citizenship.
Network certification at or above CCNA level; comparable vendor certification may be accepted upon review.
Active DoD IAT Level II certification, such as Security+, or equivalent before starting.
Experience documenting logical or physical designs with drawing tools such as Visio, PowerPoint, Gliffy, Cameo, or MagicDraw.
Experience and comfort conducting technical troubleshooting.
Experience conducting site surveys or analyzing site-survey data.
Experience creating or executing migration plans for circuits, network traffic, services, applications, or data between environments or to a commercial cloud provider, or experience planning or executing a technology or lifecycle refresh of an existing IT system.
Extensive experience upgrading and performing lifecycle refreshes of network devices.
Broad exposure to IT infrastructure networking, including LAN, WAN, TCP/UDP, IPSec, VPN, proxies, Layer 2/Layer 3 routing, and firewalls.
Experience with at least two of the following vendor technologies: Cisco, Juniper, F5, Aruba, Palo Alto, Dell, Brocade, or Fortinet.
Demonstrated experience designing and implementing medium-to-large network infrastructure and producing corresponding technical documentation.
Ability to work as part of a team to troubleshoot and resolve complex network issues.
Excellent written and verbal communication skills, including the ability to draft SOPs and technical documentation.
Ability to communicate with executive leadership about matters of significant importance to the organization or project.
Ability to present designs and plans to technical leadership personnel and boards for approval.

Nice To Haves

Certified Cisco Network Professional (CCNP) or equivalent.
Experience with enterprise network management tools such as Palo Alto Panorama, SolarWinds, Cisco Prime, Cisco DNA, What’s Up Gold, or Junos Space.
Experience designing and implementing VTC solutions.
Experience with ScienceLogic SL1 and/or SolarWinds.
Hands-on experience with SD-WAN.
Expertise in designing and improving complex geographically distributed enterprise networks.
Expert knowledge of DoD security requirements for network infrastructure.
Experience hardening network infrastructure, including implementing DoD STIGs.

Responsibilities

Plan and design secure network solutions that consolidate connectivity services under an enterprise service.
Work with stakeholders and technical experts to discover and assess legacy environments, including capabilities, configurations, and unique requirements, and develop designs and architectures using approved design patterns.
Design secure wide-area connectivity, including underlay, overlay, and COI transport, to meet performance, quality-of-service, security, and mission requirements.
Design secure access solutions using wired and wireless technologies, integrating standards and use cases and developing implementation and transition plans.
Incorporate capacity planning and scaling of network and security-stack environments into solution designs.
Investigate network performance and identify optimization strategies and techniques to meet capacity and performance standards.
Identify legacy service paths, including data flows, firewall rule sets, and ACLs, and design strategies for future enterprise services that balance requirements, security, sustainability, and maintainability.
Support development of IPv4 and IPv6 addressing schemes.
Work with information assurance teams to ensure compliance with DoD standards and assist with accreditation artifacts.
Troubleshoot and resolve complex network issues as part of a team.
Create or execute migration plans for circuits, network traffic, services, applications, or data, or plan and execute technology or lifecycle refreshes of IT systems.
Document logical and physical designs and produce technical documentation, including SOPs.
Present designs and plans to technical leadership and boards for approval, and communicate significant matters to executive leadership.