Senior Network Engineer

Leidos•Lorton, VA

9d•Onsite

About The Position

Leidos is seeking a Senior Network Engineer to support a Department of Defense program for the Air Force Life Cycle Management Center. This role supports the engineering, deployment, modernization, and sustainment of network infrastructure across multiple customer locations. The engineer translates mission and technical requirements into secure, resilient, and supportable network solutions, contributing throughout the network engineering lifecycle, from requirements analysis and architecture through implementation, testing, troubleshooting, documentation, and operational transition. The position requires hands-on experience with enterprise routing, switching, firewalls, WAN technologies, secure communications, and network management in DoD or similarly regulated environments. It is 100% on-site in Lorton, Virginia, and requires an active Top Secret clearance and the ability to obtain and maintain SCI eligibility before starting.

Requirements

U.S. citizenship.
Active Top Secret clearance and ability to obtain and maintain SCI before the start date.
Bachelor’s degree and 8+ years of experience, or a master’s degree and 6+ years of experience; additional experience may be considered in lieu of a degree.
Demonstrated experience designing, implementing, configuring, and troubleshooting enterprise network infrastructure.
Strong understanding of OSI and TCP/IP models and Layer 1–4 network protocols.
Hands-on experience configuring enterprise routers and switches.
Experience with LAN technologies, including VLANs, 802.1Q trunking, STP/RSTP, link aggregation, and Layer 3 switching.
Experience with IP addressing, subnetting, route selection, ACLs, and network segmentation.
Working knowledge of BGP and OSPF.
Experience designing, deploying, or supporting WAN connectivity between geographically separated locations.
Experience implementing or supporting IPsec or site-to-site VPN technologies.
Experience using ICMP, SNMPv3, Syslog, packet captures, and network management platforms.
Experience troubleshooting complex network connectivity, routing, performance, and configuration issues.
Ability to develop and maintain detailed technical documentation and network diagrams.
Understanding of network security principles, secure management practices, segmentation, encryption, and defense-in-depth.
Strong analytical, troubleshooting, written communication, and technical documentation skills.

Nice To Haves

Active TS/SCI security clearance.
Experience supporting DoD, U.S. Air Force, Intelligence Community, or other highly regulated government environments.
Experience with Cisco and/or Juniper enterprise routing and switching platforms.
Experience with next-generation firewalls such as Cisco, Palo Alto Networks, Fortinet, or equivalent platforms.
Experience designing or supporting high-availability network architectures, redundant WAN connectivity, and resilient network services.
Experience with DoD STIGs, RMF, NIST security controls, vulnerability management, and configuration compliance.
Understanding of DoD Zero Trust principles, including segmentation, identity-aware access, least privilege, continuous monitoring, and secure access architectures.
Experience with secure communications and DoD cryptographic devices such as TACLANE or equivalent Type 1 encryption technologies.
Experience with Cisco Secure Client/AnyConnect, Azure VPN Gateway, MPLS, IPsec, GRE, or similar WAN/VPN technologies.
Working knowledge of Microsoft Azure networking, including VNets, subnets, NSGs, routing, VPN gateways, and hybrid connectivity.
Familiarity with network automation and Infrastructure as Code tools such as Python, Ansible, Terraform, and REST APIs.
Experience with SolarWinds, Cisco network management platforms, Splunk, or equivalent monitoring and performance-management tools.
Demonstrated experience leading technical activities or mentoring junior network engineers.
Relevant certifications such as CCNP Enterprise, CCNP Security, CCIE, JNCIP/JNCIE, PCNSE, AZ-700, Security+, CISSP, or equivalent.

Responsibilities

Develop network architectures and engineering designs aligned with DoD, Air Force, cybersecurity, availability, and mission requirements.
Translate operational and technical requirements into network designs, implementation plans, equipment specifications, bills of materials, and technical documentation.
Design, configure, deploy, and troubleshoot enterprise network infrastructure, including routers, Layer 2/Layer 3 switches, firewalls, VPN gateways, and network services.
Engineer LAN and WAN solutions using Ethernet, VLANs, trunking, STP, link aggregation, QoS, ACLs, and redundant or high-availability architectures.
Configure and troubleshoot BGP, OSPF, and static routing in enterprise and multi-site environments.
Design and support secure WAN connectivity using IPsec, site-to-site VPNs, MPLS, and other DoD-approved transport solutions.
Support network security technologies, including firewalls, segmentation, access controls, secure management interfaces, and encrypted communications.
Perform packet-level and protocol analysis to identify performance, connectivity, routing, security, and interoperability issues.
Use monitoring and troubleshooting technologies such as SNMPv3, Syslog, ICMP, NetFlow, packet capture, and network management platforms to resolve operational issues.
Develop test plans and verify network functionality, performance, resiliency, interoperability, and cybersecurity compliance.
Conduct pre-deployment staging, configuration validation, and implementation-readiness activities before customer-site installation.
Troubleshoot complex issues during deployment, testing, and sustainment, and perform root-cause analysis when required.
Develop and maintain network diagrams, IP address plans, configuration baselines, interface documentation, rack elevations, cable diagrams, and as-built documentation.
Maintain configuration control and document network changes through established change and configuration management processes.
Support DoD cybersecurity requirements, including STIGs, security controls, vulnerability remediation, and RMF activities.
Collaborate with cybersecurity engineers to meet applicable DoD security and Zero Trust requirements.
Provide technical leadership and guidance to junior engineers and field personnel during installation, integration, troubleshooting, and operational turnover.
Support technical reviews, engineering meetings, site surveys, deployment planning, and customer technical discussions.
Provide technical input to procurement and evaluate hardware and software against technical, security, interoperability, lifecycle, and mission requirements.
Monitor emerging network, cybersecurity, cloud, automation, and DoD enterprise networking technologies and recommend improvements.