> Markdown version of [/jobs/ext/2850254-cleared-senior-wide-area-network-wan-engineer](https://www.wearedevelopers.com/jobs/ext/2850254-cleared-senior-wide-area-network-wan-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# cleared Senior Wide Area Network (WAN) Engineer

- **Company:** CareerCircle
- **Location:** Norfolk, VA, United States
- **Experience:** Expert
- **Salary:** $92,300.0 - $166,850.0
- **Contract:** Permanent contract
- **Skills:** IEEE 802.1X, Access Control List, Artificial Intelligence, Apple IOS, Application Layers, User Authentication, Border Gateway Protocol, Synchronous Optical Networking, VoIP, Cisco IOS, Configuration Management, CompTIA Security+, Cyber Security, Computer Networks, Wavelength-Division Multiplexing, Data Centers, Data Transport Utility, Ethernet, Enhanced Interior Gateway Routing Protocol, R (Programming Language), Network Topologies, Identity and Access Management, Networking Hardware, IP Addressing, Internet Protocol, Internet Protocol Security (IP SEC), IPv4, IPv6, Internetworking, Virtual Private Networks (VPN), Multi-protocol Systems, Information Systems Security Architecture Professional, Junos, Python (Programming Language), Key Management, Local Area Networks, Network Troubleshooting, Network Layer, Microsoft Security Essentials, Network Configuration and Change Management, NetFlow, Network Architecture, Wireless Security, Network Monitoring, Routing, Network Segmentation, Network Administration, NIPRNet, Open Shortest Path First (OSPF), Peering, Public Key Infrastructure, Ansible, SAP Sales and Distribution, Simple Network Management Protocols, Tcpdump, Software Technical Review, Wireshark, VMware VSphere, Wide Area Networks, Wireless Networks, Network Switches, Network Routing, Network Routers, Scripting, Identity Services Engine, Network Access Control, Load Balancing, Computer Network Technologies, Juniper, SC Clearance, SDN Network, SolarWinds (Software), Data Management, Puppet, Virtualization Security, Devsecops, Cisco, Plan of Action and Milestones, Vulnerability Analysis
- **Published:** September 11, 2026
- **Apply:** https://www.careercircle.com/jobs/all/all/usa/va/hampton/f341c733-63bb-498c-84d8-0ed9619bfc07

## About the Role

Market Data
Coordinating
IP Addressing
ANSYS Meshing
Voice Over IP
Change Control
Prioritization
Trend Analysis
Key Management
Network Routing
Carrier Ethernet
Operating Systems
CompTIA Security+
Autonomous System
Routing Protocols
Physical Topology
Wide Area Networks
Nodes (Networking)
Compliance Auditing
Traffic Engineering
EVPN (Ethernet VPN)
Top Secret Clearance
Network Architecture
Network Administration
Border Gateway Protocol
Configuration Management
Software Technical Review
IAT Level II Certification
IAT Level III Certification
Assessment And Authorization
Juniper Network Technologies
Python (Programming Language)
Multiprotocol Label Switching
Peering (Computer Networking)
Virtual Private Networks (VPN)
Synchronous Optical Networking
Open Shortest Path First (OSPF)
Network Quality Of Service (QoS)
Wavelength-Division Multiplexing
Troubleshooting (Problem Solving)
Simple Network Management Protocols
Plan Of Action And Milestones (POA&M)
Juniper Networks Certified Internet Expert
Enhanced Interior Gateway Routing Protocols
High Assurance Internet Protocols Encryptor
CompTIA Advanced Security Practitioner (CASP+)
Secret Internet Protocol Router Network (SIPRNet)
Certified Information Systems Security Professional
Cisco Certified Network Professional (CCNP) Enterprise
Juniper Network Certified Internet Professional (JNCIP)
Top Secret-Sensitive Compartmented Information (TS/SCI Clearance)
Cisco Certified Internetwork Expert (CCIE) Enterprise Infrastructure, * Clearance: US Citizen with at least a Top Secret clearance and the ability to obtain a SCI prior to your start date.

 * Education:Bachelor's degree with 8+ years of experience or a Master's degree with 6+ years of experience. Additional experience may be considered in lieu of a degree.
 * Experience:8+ years of hands-on enterprise WAN engineering and operations experience, withdemonstratedownership of multi-site routed transport in a DoD environment.
 * Certifications:DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent) plus an active CCNP Enterprise, JNCIP-SP, or equivalent routing certification.
 * BGP Expertise:
 + Expert-level configuration and troubleshooting of eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs.
 + Proven ability to author and tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending.
 + Experienceestablishingand sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers.
 + Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation.

 * Routing & Transport:Strongproficiencywith OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations.
 * Platforms:Hands-on administration of Cisco (IOS-XE/IOS-XR/NX-OS) and Juniper (Junos) routing platforms in an operational production network.
 * Encryption & Circuits:Experience with Type 1 inline network encryptors (TACLANE/KG-175, HAIPE) and with DISA circuit lifecycle actions (TSR/TSO, DISA Direct/SNAP).
 * Compliance:Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes.
 * Troubleshooting:Demonstratedpacket-level analysis skill using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments.
 * Availability:Ability to support on-call rotation, scheduled maintenance windows, and after-hours cutovers; occasional CONUS/OCONUS travel may berequired., * Advanced Certification:CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III (CASP+ or CISSP).
 * Segment Routing & MPLS-TE:Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.
 * SD-WAN:Hands-on experience with Cisco SD-WANor Juniper SDWANor comparable overlay transport in aDoD/DoWdeployment.
 * Automation:Proficiencywith Python, Ansible, for configuration deployment, compliance auditing, and network state validation.
 * DoD Enterprise Services:Familiarity with JRSS, DODIN operations, and DoD boundary/CDS architectures.
 * Optical Transport:Working knowledge of DWDM, SONET/SDH, and carrier Ethernet handoffs supporting long-haul circuits., Ansible
Intranet
Equities
Wrenches
Scripting
DevSecOps
Operations
Leadership
Management
Hand Tools
Encryption
Market Data
Data Centers
Screwdrivers
Communication
Team Oriented
Cyber Security
Test Equipment
Self-Motivation
Lifting Ability
Data Management
Network Routing
Ancient History
Customer Service
Asset Management
Network Switches
Defense In Depth
Network Topology
Secret Clearance
Security Controls
Change Management
Incident Response
CompTIA Security+
Computer Displays
Problem Management
Security Clearance
Wide Area Networks
Network Appliances
Local Area Networks
Network Engineering
GIAC Certifications
CompTIA Security+ CE
IT Service Management
Project Implementation
Data Transport Utility
Communications Security
R (Programming Language)
IT Security Architecture
IAT Level II Certification
Python (Programming Language)
Multiprotocol Label Switching
Troubleshooting (Problem Solving)
Cisco Certified Network Associate
Software Defined Networking (SDN)
Chef (Configuration Management Tool)
Cisco Certified Network Professional
CompTIA Cybersecurity Analyst (CySA+)
Puppet (Configuration Management Tool)
Master Of Business Administration (MBA)
Systems Security Certified Practitioner
Network Configuration And Change Management
Information Technology Infrastructure Library
GIAC Security Essentials Certification (GSEC)
GIAC Global Industrial Cyber Security Professional
Software-Defined Networking Wide Area Network (SD-WAN), IPv6
IPv4
Junos
Ansible
Tooling
NetFlow
Tcpdump
Damping
Equities
Apple IOS
Wireshark
Cisco IOS
Operations
Mitigation
SolarWinds
Market Data
Coordinating
IP Addressing
ANSYS Meshing
Change Control
Trend Analysis
Key Management
Network Routing
Carrier Ethernet
Operating Systems
CompTIA Security+
Wireless Security
Autonomous System
Routing Protocols
Physical Topology
Wide Area Networks
Nodes (Networking)
Network Encryption
Compliance Auditing
Traffic Engineering
EVPN (Ethernet VPN)
Top Secret Clearance
Border Gateway Protocol
Configuration Management
IAT Level II Certification
IAT Level III Certification
Assessment And Authorization
Juniper Network Technologies
Python (Programming Language)
Multiprotocol Label Switching
Peering (Computer Networking)
Virtual Private Networks (VPN)
Synchronous Optical Networking
Open Shortest Path First (OSPF)
Network Quality Of Service (QoS)
Wavelength-Division Multiplexing
Troubleshooting (Problem Solving)
Simple Network Management Protocols
Plan Of Action And Milestones (POA&M)
Juniper Networks Certified Internet Expert
Enhanced Interior Gateway Routing Protocols
High Assurance Internet Protocols Encryptor
CompTIA Advanced Security Practitioner (CASP+)
Certified Information Systems Security Professional
Cisco Certified Network Professional (CCNP) Enterprise
Juniper Network Certified Internet Professional (JNCIP)
Top Secret-Sensitive Compartmented Information (TS/SCI Clearance)
Cisco Certified Internetwork Expert (CCIE) Enterprise Infrastructure
+0, Hardening
Operations
Management
IEEE 802.1X
Communication
Presentations
Network Layer
Cyber Security
VMware VSphere
Load Balancing
Virtualization
Security Tools
Authentications
Network Routing
Network Switches
Secret Clearance
Incident Response
Wireless Networks
Business Valuation
Application Layers
Network Monitoring
Network Engineering
Access Control List
Network Segmentation
System Administration
Full Stack Development
Vulnerability Scanning
Network Access Control
Artificial Intelligence
Technical Documentation
Network Troubleshooting
Business Transformation
Configuration Management
Public Key Infrastructure
Juniper Network Technologies
Virtual Private Networks (VPN)
Identity And Access Management
Troubleshooting (Problem Solving)
Internet Protocol Security (IP SEC)
Cisco Identity Services Engine (ISE)
Advanced Cardiovascular Life Support (ACLS) Certification
+0

## Description

IPv4, Junos
Ansible
Tooling
NetFlow
Tcpdump
Damping
Equities
Apple IOS
Wireshark
Cisco IOS
Operations, The Defense sector at Leidos is seeking a cleared Senior Wide Area Network (WAN) Engineer to engineer, operate, and sustain long-haul transport and routing infrastructure across Department of Defense (DoD/DoW) networks. This individual serves as a Subject Matter Expert on routing for the enterprise WAN - assisting the Network Architect with Border Gateway Protocol (BGP) design, peering, and policy across NIPRNet, SIPRNet, and DISN service delivery points - and is accountable for the availability, performance, and STIG compliance of circuits supporting operational mission traffic worldwide.

Roles and Responsibilities:

 * Design, implement, and maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.
 * Serve as the escalation authority for complex WAN faults - route flapping, asymmetric paths, MTU and fragmentation issues, black-holed prefixes, and provider circuit degradation.
 * Engineer and execute circuit installations, migrations, bandwidth upgrades, and site cutovers with documented rollback plans and minimal mission impact.
 * Develop andmaintainrouting policy standards, IP address and ASN allocation plans, and authoritative network documentation including logical and physical topology diagrams.
 * Configure and sustain QoS, traffic engineering, and pathselectionto prioritize command and control, VTC, and VoIP traffic across constrained transport.
 * Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.
 * Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule andvalidatemaintenance actions and outage restoration.
 * Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.
 * Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.
 * Mentor junior network administrators, review proposed configuration changes, and represent WAN engineering positions at CCB and technical review boards.


## Related Videos

- [IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod](https://www.wearedevelopers.com/videos/1413-ip-authentication-a-tale-of-performance-pitfalls-and-challenges-in-prod)
- [Getting under the skin: The Social Engineering techniques](https://www.wearedevelopers.com/videos/38-getting-under-the-skin-the-social-engineering-techniques)
- [IoT: The road to sustainability](https://www.wearedevelopers.com/videos/557-iot-the-road-to-sustainability)
- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany)