Posted 14 days ago
Description
Description
Network Engineer - Wide Area Network Focused
2nd Shift - Typically 4:00 PM to 12:00 AM
Langley AFB, VA
TS/SCI Required to Start
The Defense Sector at Leidos isseekinga cleared Wide Area Network (WAN) Engineer (2nd Shift) to engineer,operate, and sustain long-haul transport and routing infrastructure across Department of Defense (DoD/DoW) networks. This individualassistsinroutingtroubleshootingfor the enterprise WAN- working the watch floor to resolve issues with theEnterpriseWANand is accountable for the availability, performance, and STIG compliance of circuits supporting operational mission traffic worldwide.
This position requires daily on-site work at Langley, AFB. The core hours for this position are considered 4:00 PM to 12:00 AM.
Roles and Responsibilities:
- Maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.
- Execute circuit installations, migrations, bandwidth upgrades, and site cutovers with documented rollback plans and minimal mission impact.
- Develop andmaintainrouting policy standards, IP address and ASN allocation plans, and authoritative network documentation including logical and physical topology diagrams.
- Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.
- Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule andvalidatemaintenance actions and outage restoration.
- Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.
- Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.
Required Qualifications:
- Clearance: US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date.
- Education: Bachelor's degree with 2+ years of experience or a Master's degree with 1+ years of experience. Additional experience may be considered in lieu of a degree.
- Certifications: DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent) plus an active CCNP Enterprise, JNCIP-SP, or equivalent routing certification preferred.
- Experience: 2+ years of hands-on enterprise WAN engineering and operations experience, with demonstrated ownership of multi-site routed transport in a DoD environment.
- BGP Expertise:
- Configuration and troubleshooting of eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs.
- Ability to tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending.
- Experience establishing and sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers.
- Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation.
- Routing & Transport: Proficiency with OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations.
- Platforms: Hands-on administration of Cisco (IOS-XE/IOS-XR/NX-OS) and Juniper (Junos) routing platforms in an operational production network.
- Encryption & Circuits: Experience with Type 1 inline network encryptors (TACLANE/KG-175, HAIPE) and with DISA circuit lifecycle actions (TSR/TSO, DISA Direct/SNAP).
- Compliance: Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes.
- Troubleshooting: Demonstrated packet-level analysis skill using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments.
- Shift Flexibility: Willingness to work evening and rotational shifts (e.g., 3:00 PM-11:00 PM), including weekends and holidays occasional CONUS/OCONUS travel may be required.
Preferred Qualifications:
- Advanced Certification:CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III (CASP+ or CISSP).
- Segment Routing & MPLS-TE:Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.
- SD-WAN:Hands-on experience with Cisco SD-WANor Juniper SDWANor comparable overlay transport in aDoD/DoWdeployment.
- Automation:Proficiencywith Python, Ansible, for configuration deployment, compliance auditing, and network state validation.
- DoD Enterprise Services:Familiarity with JRSS, DODIN operations, and DoD boundary/CDS architectures.
- Optical Transport:Working knowledge of DWDM, SONET/SDH, and carrier Ethernet handoffs supporting long-haul circuits.
DABAOPP1
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting:
October 26, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.