nSenior Network Engineer

• Typically requires BS degree and 8+ years of prior relevant experience or Masters with 6+ years of prior relevant experience, additional years of applicable experience will be accepted in lieu of a degree. \n
• Clearance: Active DoD Secret security clearance (U.S. Citizenship required). \n
• Must meet DoD 8140 IAT Level II or III baseline certification requirements: Cisco Certified Network Associate (CCNA) OR Cisco CCNP Enterprise. CompTIA Security+ CE Optional. \n
• Demonstrated hands-on engineering experience configuring and maintaining Cisco Catalyst and Cisco Nexus switches/routers. \n
• Proven experience administering Cisco Catalyst Center (DNA Center), Cisco ISE, and F5 BIG-IP (LTM/GTM). \n
• Direct hands-on experience loading key material, configuring, and maintaining TACLANE / HAIPE hardware (KG-175D, KGV-72). \n
• Working knowledge of DISA STIG implementation and network compliance remediation. \n
• Practical understanding of multicast routing protocols (PIM-SM/DM, IGMP) and SNMP monitoring tools (e.g., Cacti). \n, * Practical scripting ability in Python and/or automation using Ansible for network provisioning and configuration drift auditing. \n
• Familiarity with Cisco SD-WAN and Cisco Application Centric Infrastructure (ACI) fabric architectures. \n
• In-depth knowledge of IPv6 addressing schemes, dual-stack configurations, and routing protocols. \n
• Familiarity operating within air-gapped systems and classified defense networks (e.g., SIPRNet). \n
• Prior operational exposure supporting Air Force, Pentagon, or Air Force National Capital Region (AFNCR) network footprints (including Joint Base Andrews [JBA] and Joint Base Anacostia-Bolling [JBAB]). \n

n Leidos Digital sector is seeking an experienced \nSenior Network Engineer to support mission-critical, enterprise-scale network infrastructure on the AFNCR ITS program at Joint Base Andrews (JBA) & Joint Base Anacostia-Bolling (JBAB). In this role, you will be responsible for the end-to-end administration, deployment, security, and operational reliability of classified and unclassified core network hardware, boundary protections, High-Assurance IP Encryptors (HAIPEs), and data center switches. \n \n The ideal candidate brings deep technical expertise in Cisco enterprise and data center platforms, DoD STIG compliance, network telemetry, and collaborative incident resolution with defense agency stakeholders (e.g., 26th NOS, DISA). \n \n If this sounds like the kind of environment where you can thrive, keep reading! \n \n The Leidos Digital Sector is focused on digital modernization services such as enterprise IT solutions, cloud migrations, cybersecurity, analytics, SecDevOps, digital experience monitoring, and AI-enabled operations. \n \n Are you ready to make an impact? \n \n Begin your journey of a flourishing and meaningful career, share your resume with us today! \n \n \nWork Schedule: Mon-Fri 10:00am - 6:00pm (Core Shift) | On-Call / Operational Standby Rotation. \n \n \nPrimary Responsibilities: \n \n \n

• Deploy, provision, configure, and maintain high-availability data center routing and switching hardware, including Cisco Catalyst and Nexus Series platforms, as well as high-performance server network interfaces. \n
• Maintain comprehensive physical and logical infrastructure records, including exact rack elevation diagrams, patch and port maps, cable plant documentation, and physical asset management databases. \n
• Identify single-points-of-failure (SPOF) proactively across the network topology and implement redundancy and fault-tolerant architectures. \n
• Administer enterprise-level centralized network management platforms, utilizing Cisco Catalyst Center (formerly DNA Center) and Cisco Identity Services Engine (ISE) for device profiling, automated access control, and 802.1X policy enforcement. \n
• Manage and configure F5 Application Delivery Controllers (LTM/GTM) to ensure high availability, load balancing, and traffic distribution across core application tiers. \n
• Administer RSA Authentication Manager solution to facilitate Multi-Factor Authentication (MFA) for network devices and appliances. \n
• Install, configure, key, and maintain Type-1 High-Assurance IP Encryptors (HAIPEs), including TACLANE (KG-175D, KGV-72) and associated cryptographic equipment across classified and unclassified enclaves. \n
• Harden all network elements and perimeter boundary devices in strict accordance with DISA Security Technical Implementation Guides (STIGs) and DoD cybersecurity directives. \n
• Partner with cybersecurity and facility teams to ensure physical and logical boundary protection controls meet Defense Information Systems Agency (DISA) audit readiness. \n
• Monitor network performance, capacity metrics, and environmental health utilizing Cacti and enterprise SNMP-based telemetry tools. \n
• Deploy, maintain, and troubleshoot multicast routing architectures (e.g., PIM, IGMP snooping) supporting enterprise Internet Protocol Television (IPTV) systems over local area networks. \n
• Act as the primary technical point of contact (POC) interfacing with enterprise operational entities, including the 26th Network Operations Squadron (26th NOS) and DISA, facilitating rapid troubleshooting and resolution during network outages or degraded conditions. \n
• Author, coordinate, and shepherd Authorized Service Interruptions (ASIs) through change governance boards, ensuring detailed rollback plans and proactive stakeholder communications. \n
• Formulate, standardize, and maintain detailed Standard Operating Procedures (SOPs) and runbooks aligned with Air Force instructions, environmental standards, and safety policies. \n
• Participate in disaster recovery (DR) exercises, execute regular system backups, and validate physical/logical restoration procedures. \n
• Participate in a recurring Tier-3 operational standby / on-call rotation to address emergent off-hours operational degradations. \n, Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com. \n \n If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission. \n \n \nCommitment to Non-Discrimination \n \n All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.”, “hiringOrganization”: {“@type”: “Organization”, “name”: “Leidos”, “logo”: “https://jobs.military.com/attachments/employer/0/962/152/273.svg”}, “jobLocation”: {“address”: {“addressCountry”: “United States”, “streetAddress”: “Not specified”, “@type”: “PostalAddress”, “postalCode”: “20746”, “addressLocality”: “Camp Springs”, “addressRegion”: “Maryland - MD”}, “@type”: “Place”}, “industry”: “Information”, “identifier”: {“@type”: “PropertyValue”, “name”: “Leidos”, “value”: “R-00196103”}, “baseSalary”: {“@type”: “MonetaryAmount”, “currency”: “USD”, “value”: {“minValue”: “107900”, “@type”: “QuantitativeValue”, “maxValue”: “195050”, “value”: “107900”, “unitText”