More About the Role:
Leidos currently has an opening on the ‘Service Management, Integration and Transport’ (SMIT) Contract for a Transport Operations Network Security & Information Assurance Engineer position. Join our team to support the SMIT mission, the largest IT services program for the United States Navy. As part of the Leidos team, you will play a pivotal role in delivering the Navy-Marine Corps Intranet (NMCI) to customers around the globe. We are seeking a skilled Network Security & Information Assurance Engineer proficient in network security appliances and technologies (i.e. Firewalls, DMZ, IPS, VPN) to join our Transport Operations team. In this role, you will be responsible for designing, implementing, and maintaining robust & mature global network security solutions. Your expertise in configuring enterprise-grade firewalls, managing DMZ environments, configuring IPS, engineering secure VPN solutions, and administering Cisco network appliances will be crucial. You will collaborate closely with cross-functional engineering and project management teams to safeguard our network infrastructure against emerging threats and reported vulnerabilities ensuring the highest levels of security and operational integrity. You will be a member of a technical engineering team, managing customer relationships and overseeing key resources for Incident Response, Change Management, Problem Management, Operations and Maintenance (O&M), and ITSM and DevSecOps initiatives.

What You'll Get to Do:
•Support Current Operations for the United States Navy by providing Network Security and Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world.  A qualified candidate for this position would be responsible for network modification, design, integration, test, security, and implementation of Transport Services for the as-fielded NMCI network.
•Collaborates with the Network Operations Center, Network Administrators, and the Transport Operations Network Engineering Team to define and/or continuously improve:
    -Network Security Appliances (i.e. IPS, DMZ, VPN, Firewalls, Load Balancers)
    -Test and Validate Automation and best practice insertion opportunities.
    -Leads development of Network Security SOPs/TTPs
    -Continuous Service Improvements (CSI)
    -System performance tuning and enhancements
    -Create and maintain Engineering Implementation Plans (EIP)
•Extensive knowledge of defense-in-depth principles, Network and Security architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements.
•Plans and executes network upgrades and maintenance activities with the NMCI Operations Manager, NOC Lead, Release Management team and other key stakeholders.
•Tier III escalation support and vendor engagement supporting Incident Management activities.
•Active participation in Root Cause Analysis for Problem Management activities.

You'll Bring These Qualifications:
•Requires B.S. Degree and 8–12 years of prior relevant experience or Masters with 6–10 years of prior relevant experience. May possess a Doctorate in technical domain (in STEM or relevant field, with 10 years comparable experience or a Master’s degree with 6 years of comparable experience). Work experience may be substituted at Hiring Manager’s discretion.
•Effective written and oral communication and problem-solving skills.
•Currently possess an active Secret clearance or be able to obtain an Interim Secret clearance.
•Minimum of DoD 8570.01 IAT Level III Certification required prior to onboarding: CISSP or CASP (See DoD 8570.01-M Appendix 3 for valid certifications).
•An Associate level Network Vendor Certification is required prior to onboarding from one of the following Vendors: Cisco, Juniper, Aruba, F5, Palo Alto, McAfee, Trellix.
•Willingness to work or be called in to work during off-hours to meet customer mission support requirements.
•Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team.
•Network Security & IA Subject Matter Expert for operations providing Tier-III support to the NOC watch staff.
•Participate in engineering meetings between operations and engineering for projects deployed into production.
•Perform highly technical maintenance and configuration to firewalls, VPNs, IPS, and load balancers.
•Perform Information Assurance related GDA changes.
•Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols (i.e. BGP, OSPF, IS-IS), switching protocols (i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP) Multicast protocols and emerging network technologies.
•Strong understanding and in-depth knowledge of IP network/subnet addressing.
•Experienced and adept at developing and maintaining technical documents, analysis, and reports.
•Familiarity with the ITIL framework,
•Ability to travel up to 25% including OCONUS potential travel.

These Qualifications Would be Nice to Have:
•Previous work experience providing support to the NGEN-NMCI program.
•Previous work experience providing support to a DoD program.
•Experience with Aruba ClearPass Policy Manager (CPPM) identity management solution.
•Advanced/Professional level vendor certifications (Cisco, Juniper, Aruba, F5, Palo Alto, McAfee, Trellix).
•Demonstrated NET/SEC DevOps experience.
•ITIL v3/v4 certification/training.
•Agile certifications or applicable experience.

Original Posting Date:

2024-08-13

While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.