Senior Network Engineer
About The Position
Leidos Digital Sector is seeking an experienced Senior Network Engineer to support mission-critical, enterprise-scale network infrastructure on the AFNCR ITS program at Joint Base Andrews (JBA) and Joint Base Anacostia-Bolling (JBAB). The role is responsible for end-to-end administration, deployment, security, and operational reliability of classified and unclassified core network hardware, boundary protections, High-Assurance IP Encryptors (HAIPEs), and data center switches. The engineer will work with Cisco enterprise and data center platforms, DoD STIG compliance, network telemetry, and defense agency stakeholders including the 26th NOS and DISA. The position supports Leidos Digital Sector services including enterprise IT solutions, cloud migrations, cybersecurity, analytics, SecDevOps, digital experience monitoring, and AI-enabled operations. The core work schedule is Monday through Friday, 10:00 a.m. to 6:00 p.m., with an on-call/operational standby rotation.
Requirements
- Typically, a bachelor's degree and 8 or more years of relevant experience, or a master's degree and 6 or more years of relevant experience; additional applicable experience may be accepted in lieu of a degree.
- Active DoD Secret security clearance and U.S. citizenship.
- Meet DoD 8140 IAT Level II or III baseline certification requirements through CCNA or CCNP Enterprise; CompTIA Security+ CE is optional.
- Hands-on engineering experience configuring and maintaining Cisco Catalyst and Cisco Nexus switches and routers.
- Experience administering Cisco Catalyst Center (DNA Center), Cisco ISE, and F5 BIG-IP (LTM/GTM).
- Hands-on experience loading key material, configuring, and maintaining TACLANE/HAIPE hardware, including KG-175D and KGV-72.
- Working knowledge of DISA STIG implementation and network compliance remediation.
- Practical understanding of multicast routing protocols, including PIM-SM/DM and IGMP, and SNMP monitoring tools such as Cacti.
Nice To Haves
- Practical scripting ability in Python and/or automation experience using Ansible for network provisioning and configuration drift auditing.
- Familiarity with Cisco SD-WAN and Cisco Application Centric Infrastructure (ACI) fabric architectures.
- In-depth knowledge of IPv6 addressing schemes, dual-stack configurations, and routing protocols.
- Familiarity operating within air-gapped systems and classified defense networks such as SIPRNet.
- Prior operational experience supporting Air Force, Pentagon, or AFNCR network footprints, including JBA and JBAB.
Responsibilities
- Deploy, provision, configure, and maintain high-availability data center routing and switching hardware, including Cisco Catalyst and Nexus platforms and high-performance server network interfaces.
- Maintain physical and logical infrastructure records, including rack elevation diagrams, patch and port maps, cable plant documentation, and physical asset management databases.
- Identify single points of failure across the network topology and implement redundancy and fault-tolerant architectures.
- Administer centralized network management platforms, including Cisco Catalyst Center and Cisco Identity Services Engine (ISE), for device profiling, automated access control, and 802.1X policy enforcement.
- Manage and configure F5 Application Delivery Controllers (LTM/GTM) for high availability, load balancing, and traffic distribution.
- Administer RSA Authentication Manager to facilitate multi-factor authentication for network devices and appliances.
- Install, configure, key, and maintain Type-1 HAIPEs, including TACLANE KG-175D and KGV-72 equipment, across classified and unclassified enclaves.
- Harden network elements and perimeter boundary devices in accordance with DISA STIGs and DoD cybersecurity directives.
- Partner with cybersecurity and facility teams to ensure physical and logical boundary protection controls support DISA audit readiness.
- Monitor network performance, capacity metrics, and environmental health using Cacti and enterprise SNMP-based telemetry tools.
- Deploy, maintain, and troubleshoot multicast routing architectures, including PIM and IGMP snooping, for IPTV systems over local area networks.
- Serve as the primary technical point of contact with operational entities, including the 26th NOS and DISA, and facilitate troubleshooting and resolution during outages or degraded conditions.
- Author and coordinate Authorized Service Interruptions (ASIs) through change governance boards, including rollback plans and stakeholder communications.
- Develop, standardize, and maintain SOPs and runbooks aligned with Air Force instructions, environmental standards, and safety policies.
- Participate in disaster recovery exercises, perform regular system backups, and validate physical and logical restoration procedures.
- Participate in a recurring Tier-3 operational standby/on-call rotation to address off-hours operational degradations.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
