Senior Network Engineer

Leidos•Odenton, MD

9d•Onsite

About The Position

Leidos is seeking a Senior Network Engineer to join its Defense Enclave Services (DES) team at Ft. Meade, Maryland. The DES program supports DISA enterprise IT services and a large, complex discovery, design, and migration effort to consolidate Department of Defense IT services into a single service-provider model. The role supports discovery, analysis, design, and network migration activities to move DoD agencies into the modernized DoDNet environment. The engineer plans secure enterprise network solutions, works with stakeholders to assess legacy environments and develop architectures using approved design patterns, and designs wide-area connectivity and secure wired and wireless access. The position also addresses capacity planning, network optimization, legacy service paths, IP addressing, and coordination with information assurance teams on DoD compliance and accreditation artifacts. The position is based at Ft. Meade, MD. Candidates must hold an active Secret clearance before starting, be able to obtain a Top Secret clearance, and be U.S. citizens.

Requirements

Bachelor’s degree and at least 8 years of relevant experience; specific experience, education, and training may be considered in lieu of a degree.
Active DoD Secret security clearance before starting; must be able to obtain a Top Secret clearance.
U.S. citizenship required.
Network certification meeting or exceeding CCNA; comparable vendor certification may be accepted upon review.
Active DoD IAT Level II certification, such as Security+, or equivalent before starting.
Experience documenting logical or physical designs with drawing tools such as Visio, PowerPoint, Gliffy, Cameo, or MagicDraw.
Experience and comfort conducting technical troubleshooting to resolve issues.
Experience conducting site surveys or analyzing site-survey data.
Experience creating or executing migration plans to move circuits, network traffic, services, applications, or data between environments or to a commercial cloud provider; alternatively, experience planning or executing a technology or lifecycle refresh of an existing IT system.
Extensive experience upgrading and performing lifecycle refreshes of network devices.
Broad exposure to common IT infrastructure networking, including LAN, WAN, TCP/UDP, IPSec, VPN, proxies, Layer 2/Layer 3 routing, and firewalls.
Experience with at least two of these vendor network technologies: Cisco, Juniper, F5, Aruba, Palo Alto, Dell, Brocade, or Fortinet.
Demonstrated experience designing and implementing medium-to-large network infrastructure and producing corresponding technical documentation.
Ability to work as part of a team to troubleshoot and resolve complex network issues.
Excellent written and verbal communication skills, including drafting SOPs and technical documentation.
Ability to communicate with executive leadership about significant organizational or project matters and present designs and plans to technical leaders and approval boards.

Nice To Haves

Certified Cisco Network Professional (CCNP) or equivalent.
Experience with enterprise network management tools such as Palo Alto Panorama, SolarWinds, Cisco Prime, Cisco DNA, What’s Up Gold, or Junos Space.
Experience designing and implementing VTC solutions.
Experience with ScienceLogic SL1 and/or SolarWinds.
Hands-on experience with SD-WAN.
Expertise designing and improving complex, geographically distributed enterprise networks.
Expert knowledge of DoD security requirements for network infrastructure.
Experience hardening network infrastructure, including implementing DoD STIGs.

Responsibilities

Plan and design secure network solutions to consolidate connectivity services under an enterprise service.
Partner with stakeholders and technical experts to discover legacy environments, assess capabilities and configurations, and develop designs and architectures using approved design patterns.
Design secure wide-area connectivity, including underlay, overlay, and COI transport, to support performance, quality of service, security, and mission requirements.
Provide secure access solutions using wired and wireless technologies, integrating standards and use cases and developing implementation and transition plans.
Integrate network and security-stack capacity planning and scaling into solution designs.
Investigate network performance and identify optimization strategies and techniques to meet capacity and performance standards.
Identify legacy service paths, including data flows, firewall rulesets, and ACLs, and design future enterprise-service capabilities that balance security, sustainability, and maintainability.
Support development of IPv4 and IPv6 addressing schemes.
Work with information assurance teams to ensure compliance with DoD standards and help provide accreditation artifacts.
Troubleshoot and resolve technical and complex network issues as part of a team.
Create or execute migration plans for circuits, network traffic, services, applications, or data, or plan or execute technology refreshes of existing IT systems.
Document logical or physical designs and prepare SOPs and technical documentation.
Communicate with executive leadership about significant organizational or project matters and present designs and plans to technical leadership and approval boards.