cleared Senior Wide Area Network (WAN) Engineer

IPv4, Junos Ansible Tooling NetFlow Tcpdump Damping Equities Apple IOS Wireshark Cisco IOS Operations, The Defense sector at Leidos is seeking a cleared Senior Wide Area Network (WAN) Engineer to engineer, operate, and sustain long-haul transport and routing infrastructure across Department of Defense (DoD/DoW) networks. This individual serves as a Subject Matter Expert on routing for the enterprise WAN - assisting the Network Architect with Border Gateway Protocol (BGP) design, peering, and policy across NIPRNet, SIPRNet, and DISN service delivery points - and is accountable for the availability, performance, and STIG compliance of circuits supporting operational mission traffic worldwide.

Roles and Responsibilities:

• Design, implement, and maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.
• Serve as the escalation authority for complex WAN faults - route flapping, asymmetric paths, MTU and fragmentation issues, black-holed prefixes, and provider circuit degradation.
• Engineer and execute circuit installations, migrations, bandwidth upgrades, and site cutovers with documented rollback plans and minimal mission impact.
• Develop andmaintainrouting policy standards, IP address and ASN allocation plans, and authoritative network documentation including logical and physical topology diagrams.
• Configure and sustain QoS, traffic engineering, and pathselectionto prioritize command and control, VTC, and VoIP traffic across constrained transport.
• Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.
• Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule andvalidatemaintenance actions and outage restoration.
• Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.
• Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.
• Mentor junior network administrators, review proposed configuration changes, and represent WAN engineering positions at CCB and technical review boards.

Market Data Coordinating IP Addressing ANSYS Meshing Voice Over IP Change Control Prioritization Trend Analysis Key Management Network Routing Carrier Ethernet Operating Systems CompTIA Security+ Autonomous System Routing Protocols Physical Topology Wide Area Networks Nodes (Networking) Compliance Auditing Traffic Engineering EVPN (Ethernet VPN) Top Secret Clearance Network Architecture Network Administration Border Gateway Protocol Configuration Management Software Technical Review IAT Level II Certification IAT Level III Certification Assessment And Authorization Juniper Network Technologies Python (Programming Language) Multiprotocol Label Switching Peering (Computer Networking) Virtual Private Networks (VPN) Synchronous Optical Networking Open Shortest Path First (OSPF) Network Quality Of Service (QoS) Wavelength-Division Multiplexing Troubleshooting (Problem Solving) Simple Network Management Protocols Plan Of Action And Milestones (POA&M) Juniper Networks Certified Internet Expert Enhanced Interior Gateway Routing Protocols High Assurance Internet Protocols Encryptor CompTIA Advanced Security Practitioner (CASP+) Secret Internet Protocol Router Network (SIPRNet) Certified Information Systems Security Professional Cisco Certified Network Professional (CCNP) Enterprise Juniper Network Certified Internet Professional (JNCIP) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) Cisco Certified Internetwork Expert (CCIE) Enterprise Infrastructure, * Clearance: US Citizen with at least a Top Secret clearance and the ability to obtain a SCI prior to your start date.

• Education:Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
• Experience:8+ years of hands-on enterprise WAN engineering and operations experience, withdemonstratedownership of multi-site routed transport in a DoD environment.
• Certifications:DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent) plus an active CCNP Enterprise, JNCIP-SP, or equivalent routing certification.
• BGP Expertise:
• Expert-level configuration and troubleshooting of eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs.
• Proven ability to author and tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending.
• Experienceestablishingand sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers.

• Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation.

• Routing & Transport:Strongproficiencywith OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations.
• Platforms:Hands-on administration of Cisco (IOS-XE/IOS-XR/NX-OS) and Juniper (Junos) routing platforms in an operational production network.
• Encryption & Circuits:Experience with Type 1 inline network encryptors (TACLANE/KG-175, HAIPE) and with DISA circuit lifecycle actions (TSR/TSO, DISA Direct/SNAP).
• Compliance:Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes.
• Troubleshooting:Demonstratedpacket-level analysis skill using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments.
• Availability:Ability to support on-call rotation, scheduled maintenance windows, and after-hours cutovers; occasional CONUS/OCONUS travel may berequired., * Advanced Certification:CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III (CASP+ or CISSP).
• Segment Routing & MPLS-TE:Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.
• SD-WAN:Hands-on experience with Cisco SD-WANor Juniper SDWANor comparable overlay transport in aDoD/DoWdeployment.
• Automation:Proficiencywith Python, Ansible, for configuration deployment, compliance auditing, and network state validation.
• DoD Enterprise Services:Familiarity with JRSS, DODIN operations, and DoD boundary/CDS architectures.
• Optical Transport:Working knowledge of DWDM, SONET/SDH, and carrier Ethernet handoffs supporting long-haul circuits., Ansible Intranet Equities Wrenches Scripting DevSecOps Operations Leadership Management Hand Tools Encryption Market Data Data Centers Screwdrivers Communication Team Oriented Cyber Security Test Equipment Self-Motivation Lifting Ability Data Management Network Routing Ancient History Customer Service Asset Management Network Switches Defense In Depth Network Topology Secret Clearance Security Controls Change Management Incident Response CompTIA Security+ Computer Displays Problem Management Security Clearance Wide Area Networks Network Appliances Local Area Networks Network Engineering GIAC Certifications CompTIA Security+ CE IT Service Management Project Implementation Data Transport Utility Communications Security R (Programming Language) IT Security Architecture IAT Level II Certification Python (Programming Language) Multiprotocol Label Switching Troubleshooting (Problem Solving) Cisco Certified Network Associate Software Defined Networking (SDN) Chef (Configuration Management Tool) Cisco Certified Network Professional CompTIA Cybersecurity Analyst (CySA+) Puppet (Configuration Management Tool) Master Of Business Administration (MBA) Systems Security Certified Practitioner Network Configuration And Change Management Information Technology Infrastructure Library GIAC Security Essentials Certification (GSEC) GIAC Global Industrial Cyber Security Professional Software-Defined Networking Wide Area Network (SD-WAN), IPv6 IPv4 Junos Ansible Tooling NetFlow Tcpdump Damping Equities Apple IOS Wireshark Cisco IOS Operations Mitigation SolarWinds Market Data Coordinating IP Addressing ANSYS Meshing Change Control Trend Analysis Key Management Network Routing Carrier Ethernet Operating Systems CompTIA Security+ Wireless Security Autonomous System Routing Protocols Physical Topology Wide Area Networks Nodes (Networking) Network Encryption Compliance Auditing Traffic Engineering EVPN (Ethernet VPN) Top Secret Clearance Border Gateway Protocol Configuration Management IAT Level II Certification IAT Level III Certification Assessment And Authorization Juniper Network Technologies Python (Programming Language) Multiprotocol Label Switching Peering (Computer Networking) Virtual Private Networks (VPN) Synchronous Optical Networking Open Shortest Path First (OSPF) Network Quality Of Service (QoS) Wavelength-Division Multiplexing Troubleshooting (Problem Solving) Simple Network Management Protocols Plan Of Action And Milestones (POA&M) Juniper Networks Certified Internet Expert Enhanced Interior Gateway Routing Protocols High Assurance Internet Protocols Encryptor CompTIA Advanced Security Practitioner (CASP+) Certified Information Systems Security Professional Cisco Certified Network Professional (CCNP) Enterprise Juniper Network Certified Internet Professional (JNCIP) Top Secret-Sensitive Compartmented Information (TS/SCI Clearance) Cisco Certified Internetwork Expert (CCIE) Enterprise Infrastructure +0, Hardening Operations Management IEEE 802.1X Communication Presentations Network Layer Cyber Security VMware VSphere Load Balancing Virtualization Security Tools Authentications Network Routing Network Switches Secret Clearance Incident Response Wireless Networks Business Valuation Application Layers Network Monitoring Network Engineering Access Control List Network Segmentation System Administration Full Stack Development Vulnerability Scanning Network Access Control Artificial Intelligence Technical Documentation Network Troubleshooting Business Transformation Configuration Management Public Key Infrastructure Juniper Network Technologies Virtual Private Networks (VPN) Identity And Access Management Troubleshooting (Problem Solving) Internet Protocol Security (IP SEC) Cisco Identity Services Engine (ISE) Advanced Cardiovascular Life Support (ACLS) Certification +0

Pay and benefits are fundamental to any career decision. That’s why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .

If you’re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 - and moving faster than anyone else dares., Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .