Network Engineer (Top Secret / SCI Clearance Required)

Join the Digital Modernization Sector at Leidos supporting the Homeland Enterprise Information Technology Services (HEITS) Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP).

In this role, you will help design, evolve, sustain, and secure the network enterprise supporting the ITP mission. You will play a vital part in protecting homeland security by supporting systems that leverage advanced analytics, monitoring, and data correlation to detect and mitigate potential threat actors.

Key Responsibilities

• Network Infrastructure & Administration: Maintain, operate, and troubleshoot ITP network infrastructure, perform routine maintenance, lead system recapitalization efforts, and manage system availability and capacity.
• Cross-Domain Solutions: Oversee and support Everfox High-Speed Guard Cross Domain platform for secure data transfer across multiple classification domains.
• Architecture & Upgrades: Design recapitalization plans to accommodate growing capacity and changing customer requirements; serve as the Subject Matter Expert (SME) on all ITP network infrastructure.
• Security & Compliance: Deploy network configurations adhering to NIST, FISMA, and DISA STIG requirements; build and optimize firewall rule sets for maximum efficiency and threat prevention; support ATO reviews and security audits.
• Documentation & Incident Lifecycle: Maintain configuration baseline documentation and lead information security incident lifecycles, including incident response, mitigation, post-action reporting, and remediation.

• Bachelor’s degree in Engineering, CS, IT, or related field with 4-8 years of prior relevant experience, OR
• Master’s degree with 4+ years of prior relevant experience.
• Clearance: Active TS/SCI security clearance; ability to obtain DHS Entry on Duty (EOD) suitability.
• Certifications: Cisco Certified Network Professional (CCNP) required.
• Networking & Hardware: Hands-on experience engineering, deploying, and operating LAN/WAN switches and firewalls (Cisco 2900, 4500, 9300, 9400, 6800, Nexus 9000 series, Cisco Firepower, and ASA).
• Security Architecture: Solid understanding of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security controls.
• Network Management Tools: Experience with monitoring and management suites such as SolarWinds, WhatsUp Gold, NetQoS, or NetBrain.
• Cross-Platform Knowledge: Familiarity with VMware, Linux, Microsoft Server, and Active Directory environments.

Preferred Qualifications

• Master’s degree in IT Management, Engineering, or related field.
• CISSP, CCNP Security, or Palo Alto Networks ACE (PAN-OS) certifications.
• Experience with User Activity Monitoring (UAM) platforms and Everfox High Speed Guard.
• Hands-on experience with Palo Alto Firewalls and Juniper LAN/WAN infrastructure.
• 4-8+ years of experience in IT service delivery management within federal or defense environments.