Sr. Network Engineer (CAN/LAN) - TS/SCI with Poly Required

$87,100 - $157,450/Yr

Leidos - Chantilly, VA

Full-time - Senior

Chantilly, VA

Professional, Scientific, and Technical Services

About the position

The Digital Modernization Sector at Leidos is seeking a highly skilled Senior Network Engineer to support various controller area networks (CANs) and local area networks (LANs). This position is critical in providing boundary protection to an enterprise-level infrastructure across multiple classifications. The selected candidate will act as a subject matter expert in boundary technologies across various vendors, ensuring the integrity and security of network operations. In this role, the Senior Network Engineer will interpret requirements and standard design approaches for service delivery, fully documenting designs with diagrams, bill of materials, cabling sheets, configurations, and other supporting documents. The engineer will utilize a private test lab to evaluate new technologies and capabilities, test proposed changes to production networks, and recreate troubleshooting scenarios to support the production enterprise network. Scheduling maintenance windows for migrating user connections from legacy systems to modern infrastructure will be a key responsibility, ensuring that transitions occur with minimal impact on critical data flows. The engineer will provide technical expertise to operations engineers and technicians, supporting fault isolation and resolution, and will be expected to solve complex problems with innovative and scalable solutions. Developing secure network designs that align with Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and enterprise policies is essential, as is obtaining Authority to Operate (ATO) for new devices, software, and capabilities. While the position does not involve direct management, the engineer will supervise other network support specialists to plan, coordinate, and implement network services effectively. Additionally, the role offers opportunities to learn and work on Multiprotocol Label Switching (MPLS) Wide Area Networks (WANs), expanding the engineer's expertise beyond CAN/LAN. The ideal candidate will have a strong background in network engineering and design, particularly in compliance with DoD 8570 Information Assurance Technical (IAT) Level 2 (Security+ CE).

Responsibilities

• Interpret requirements and standard design approaches for service delivery.
• Fully document designs with diagrams, bill of materials, cabling sheets, configurations, and other supporting documents.
• Use a private test lab to evaluate new technologies and capabilities, test proposed changes to production networks, and recreate troubleshooting scenarios.
• Schedule maintenance windows for migrating user connections from legacy to modern infrastructure with minimal impact on critical data flows.
• Provide technical expertise to operations engineers and technicians, supporting fault isolation and resolution.
• Develop secure network designs including configurations that align with DISA STIGs and enterprise policies.
• Obtain Authority to Operate (ATO) for new devices, software, and capabilities.
• Supervise other network support specialists to plan, coordinate, and implement network services.
• Develop and improve design products, processes, and systems for efficient team operations.
• Learn and work on MPLS WANs.

Requirements

• TS SCI with Polygraph security clearance.
• 16 years of experience in network engineering, which can be a combination of work history and education (Doctorate and 8 years, Master's and 10 years, Bachelor's and 12 years, Associate's and 14 years, or HS diploma and 16 years).
• Compliance with DoD 8570 Information Assurance Technical (IAT) Level 2 (Security+ CE).
• Experience specific to Network Engineering, including Tier 3 or higher network operations and/or network design and implementation.

Nice-to-haves

• Network engineering and design experience specific to CAN/LAN, including application of industry standards and developing configurations.
• Experience with MPLS WANs, network management tools, and firewalls.
• Expert knowledge of routing and switching protocols, with extensive BGP experience preferred.
• Cisco Certified Network Professional (CCNP) or equivalent knowledge.
• Ability to obtain CCNP certification within one year from the date of hire.
• Experience establishing processes, developing documents, and organizing repositories.
• Prior responsibility for production network hardware configurations for Cisco, Brocade, and/or Juniper.
• Hands-on experience implementing and troubleshooting standard routing protocols such as OSPF or EIGRP.
• Hands-on experience implementing and troubleshooting standard switching and trunking protocols such as VLANs, 802.1q, and port-channels.