Senior Network Engineer

Leidos•Fort Meade, MD

7d•$92,300 - $166,850

About The Position

Leidos is seeking a Senior Network Engineer to join its Defense Enclave Services (DES) team at Ft. Meade, Maryland. The DES program supports DISA’s enterprise Information Technology services and a complex effort to discover, design, and migrate Department of Defense IT services into a single service-provider model. The role supports discovery, analysis, design, and network migration activities to move DoD agencies into the modernized DoDNet environment. The engineer plans and designs secure network solutions and works with stakeholders and technical experts to assess legacy environments, identify capabilities and requirements, and develop architectures using approved design patterns. The role designs secure wide-area connectivity and wired and wireless access, incorporates capacity and scaling considerations, and develops optimization strategies. It also includes identifying legacy service paths, developing designs for future enterprise services, supporting IPv4 and IPv6 addressing schemes, and working with information assurance teams on DoD compliance and accreditation artifacts. The position requires an active Secret security clearance before starting, the ability to obtain a Top Secret clearance, and U.S. citizenship. The stated pay range is $92,300 to $166,850.

Requirements

Bachelor’s degree and 8+ years of relevant experience; specific experience, education, and training may be considered in lieu of a degree.
Active DoD Secret clearance before starting; must be able to obtain a Top Secret clearance.
U.S. citizenship.
Network certification that meets or exceeds CCNA; comparable vendor certifications may be accepted upon review.
Active DoD IAT Level II certification, such as Security+, or equivalent before starting.
Experience documenting logical or physical designs with drawing tools such as Visio, PowerPoint, Gliffy, Cameo, or MagicDraw.
Experience and comfort conducting technical troubleshooting to resolve issues.
Experience conducting site surveys or analyzing data obtained from site surveys.
Experience creating or executing migration plans for circuits, network traffic, services, applications, or data between environments or to a commercial cloud provider, or planning or executing technology or lifecycle refreshes of existing IT systems.
Extensive experience upgrading and performing lifecycle refreshes of network devices.
Broad exposure to IT infrastructure networking, including LAN, WAN, TCP/UDP, IPSec, VPN, proxies, Layer 2/Layer 3 routing, and firewalls.
Experience with at least two of the following vendor network technologies: Cisco, Juniper, F5, Aruba, Palo Alto, Dell, Brocade, and Fortinet.
Demonstrated experience designing and implementing medium-to-large network infrastructure and producing corresponding technical documentation.
Ability to work as part of a team to troubleshoot and resolve complex network issues.
Excellent written and verbal communication skills, including drafting SOPs and technical documentation.
Ability to communicate with executive leadership about matters of significant importance to the organization or project.
Ability to present designs and plans to technical leadership personnel and boards for approval.

Nice To Haves

Certified Cisco Network Professional (CCNP) or equivalent.
Experience with enterprise network management tools such as Palo Alto Panorama, SolarWinds, Cisco Prime, Cisco DNA, What’s Up Gold, or Junos Space.
Experience designing and implementing VTC solutions.
Experience with ScienceLogic SL1 and/or SolarWinds.
Hands-on experience with SD-WAN.
Expertise in designing and improving complex, geographically distributed enterprise networks.
Expert knowledge of DoD security requirements for network infrastructure.
Experience hardening network infrastructure, including implementing DoD STIGs.

Responsibilities

Plan and design secure network solutions to consolidate connectivity services under an enterprise service.
Partner with stakeholders and technical experts to discover legacy environments, assess capabilities, configurations, and unique requirements, and develop designs and architectures using approved design patterns.
Design secure wide-area connectivity, including underlay, overlay, and COI transport, to support performance, quality of service, security, and mission requirements.
Provide secure access solutions using wired and wireless technologies, and develop associated implementation and transition plans.
Integrate capacity planning and scaling of network and security stack environments into solution designs.
Identify network optimization strategies and techniques to meet capacity and performance standards.
Identify legacy service paths, including data flows, firewall rule sets, and ACLs, and develop designs for future enterprise service capabilities that balance security, sustainability, and maintainability.
Support development of IPv4 and IPv6 addressing schemes.
Work with information assurance teams to ensure compliance with DoD standards and assist in providing accreditation artifacts.
Troubleshoot and resolve network issues as part of a team.
Create technical documentation, including SOPs, and present designs and plans to technical leadership and approval boards.