Senior Network Engineer

Leidos•Lorton, VA

18d•Onsite

About The Position

Leidos is seeking a Senior Network Engineer to support a Department of Defense program for the Air Force Life Cycle Management Center. The role supports engineering, deployment, modernization, and sustainment of network infrastructure across multiple customer locations. The engineer translates mission and technical requirements into secure, resilient, supportable network solutions and contributes throughout the network engineering lifecycle, from requirements analysis and architecture through procurement support, staging, implementation, testing, troubleshooting, documentation, and operational transition. The position requires hands-on enterprise networking experience in DoD or similarly regulated environments and is 100% on-site in Lorton, Virginia. An active Top Secret clearance is required, with the ability to obtain and maintain SCI before the start date.

Requirements

U.S. citizenship and an active Top Secret clearance, with the ability to obtain and maintain SCI before the start date.
Bachelor's degree and 8+ years of experience, or a master's degree and 6+ years of experience; additional experience may be considered in lieu of a degree.
Demonstrated experience designing, implementing, configuring, and troubleshooting enterprise network infrastructure.
Strong understanding of the OSI and TCP/IP models and protocols associated with Layers 1–4.
Hands-on experience configuring enterprise routers and switches.
Experience implementing and troubleshooting LAN technologies, including VLANs, 802.1Q trunking, STP/RSTP, link aggregation, and Layer 3 switching.
Experience with IP addressing, subnetting, route selection, ACLs, and network segmentation.
Working knowledge of BGP and OSPF.
Experience designing, deploying, or supporting WAN connectivity across geographically separated locations.
Experience implementing or supporting IPsec/site-to-site VPN technologies.
Experience using ICMP, SNMPv3, Syslog, packet captures, and network management platforms for monitoring and troubleshooting.
Experience troubleshooting complex network connectivity, routing, performance, and configuration issues.
Ability to develop and maintain detailed technical documentation and network diagrams.
Understanding of network security principles, secure management practices, segmentation, encryption, and defense-in-depth.
Strong analytical, troubleshooting, written communication, and technical documentation skills.

Nice To Haves

Active TS/SCI security clearance.
Experience supporting DoD, U.S. Air Force, Intelligence Community, or other highly regulated government environments.
Experience with Cisco and/or Juniper enterprise routing and switching platforms.
Experience with next-generation firewalls such as Cisco, Palo Alto Networks, Fortinet, or equivalent platforms.
Experience designing or supporting high-availability network architectures, redundant WAN connectivity, and resilient network services.
Experience with DoD STIGs, RMF, NIST security controls, vulnerability management, and configuration compliance.
Understanding of DoD Zero Trust principles, including network segmentation, identity-aware access, least privilege, continuous monitoring, and secure access architectures.
Experience with secure communications and DoD cryptographic devices such as TACLANE or equivalent Type 1 encryption technologies.
Experience with Cisco Secure Client/AnyConnect, Azure VPN Gateway, MPLS, IPsec, GRE, or similar enterprise WAN/VPN technologies.
Working knowledge of Microsoft Azure networking, including VNets, subnets, NSGs, routing, VPN gateways, and hybrid connectivity.
Familiarity with network automation and Infrastructure as Code tools such as Python, Ansible, Terraform, REST APIs, or similar technologies.
Experience with SolarWinds, Cisco network management platforms, Splunk, or equivalent monitoring and performance-management technologies.
Demonstrated experience leading technical activities or mentoring junior network engineers.
Relevant certifications such as CCNP Enterprise, CCNP Security, CCIE, JNCIP/JNCIE, PCNSE, AZ-700, Security+, CISSP, or equivalent.

Responsibilities

Develop network architectures and engineering designs aligned with DoD, Air Force, cybersecurity, availability, and mission requirements.
Translate requirements into network designs, implementation plans, equipment specifications, Bills of Materials, and technical documentation.
Design, configure, deploy, and troubleshoot enterprise network infrastructure, including routers, Layer 2/Layer 3 switches, firewalls, VPN gateways, and associated services.
Engineer LAN and WAN solutions using technologies such as Ethernet, VLANs, trunking, STP, link aggregation, QoS, ACLs, and high-availability architectures.
Configure and troubleshoot BGP, OSPF, and static routing in enterprise and multi-site environments.
Design and support secure WAN connectivity using IPsec, site-to-site VPNs, MPLS, and other DoD-approved transport solutions.
Support network security technologies, including firewalls, segmentation, access controls, secure management interfaces, and encrypted communications.
Perform packet-level and protocol analysis to identify network performance, connectivity, routing, security, and interoperability issues.
Use SNMPv3, Syslog, ICMP, NetFlow, packet capture, and network management platforms to monitor and troubleshoot networks.
Develop test plans and verify network functionality, performance, resiliency, interoperability, and cybersecurity compliance.
Conduct pre-deployment staging, configuration validation, and implementation readiness activities.
Troubleshoot complex network issues during deployment, testing, and sustainment, and perform root-cause analysis as needed.
Develop and maintain network diagrams, IP address plans, configuration baselines, interface documentation, rack elevations, cable diagrams, and as-built documentation.
Maintain configuration control and document network changes in accordance with established processes.
Support DoD cybersecurity requirements, including STIGs, security controls, vulnerability remediation, and RMF activities.
Collaborate with cybersecurity engineers to meet DoD security and Zero Trust requirements.
Provide technical guidance to junior engineers and field personnel during installation, integration, troubleshooting, and operational turnover.
Support technical reviews, engineering meetings, site surveys, deployment planning, and customer technical discussions.
Provide procurement input and evaluate network hardware and software for technical, security, interoperability, lifecycle, and mission requirements.
Track emerging networking, cybersecurity, cloud, automation, and DoD enterprise networking technologies and recommend improvements.