Network Engineer

Leidos is seeking an experienced Network Engineer to support the Defense Manpower Data Center (DMDC) CyberPRIMES program. Leidos is a major partner on the contract and will provide a substantial portion of the cybersecurity workforce supporting the Defense Human Resources Activity (DHRA) and DMDC.

• Mark Center, Alexandria, Virginia
• Department of Defense Center - Monterey Bay, Seaside, California

Active Secret security clearance required at time of consideration. U.S. Citizen is a must.

DMDC supports the Defense Human Resources Activity within the Office of the Under Secretary of Defense for Personnel and Readiness (OUSD(P&R)) and maintains the Department of Defense’s largest and most comprehensive central repository of personnel, manpower, casualty, pay, entitlement, personnel security, identity, readiness, training, and related data. The DHRA Information Technology (IT) environment includes approximately 15,000 network and endpoint devices supporting more than 600 Government-Off-The-Shelf (GOTS) applications and approximately 100 Risk Management Framework (RMF) authorization boundaries managed through the Enterprise Mission Assurance Support Service (eMASS).

External connectivity within this environment is governed through Department of Defense registration, approval, and compliance processes. DHRA processes approximately 500 Ports, Protocols, and Services Management (PPSM) requests annually and maintains a significant inventory of approved enterprise whitelist entries. The Network Engineer will help ensure required connectivity is implemented without creating unauthorized or unmanaged pathways across Department of Defense network boundaries.

• Support external network-connectivity compliance and associated network-boundary registration and approval processes.
• Review technical network implementations to ensure compliance with Department of Defense connectivity and cybersecurity requirements.
• Review firewall requests and evaluate required ports, protocols, application services, communication paths, and network boundaries.
• Prepare, review, submit, and track Ports, Protocols, and Services Management requests for registration and technical implementation.
• Validate PPSM requests for completeness, technical accuracy, and compliance before submission.
• Identify the ports, protocols, application services, and network boundaries associated with proposed communications.
• Review proposed connectivity against applicable Department of Defense requirements and the Connection Approval List (CAL).
• Identify incomplete, inaccurate, or noncompliant requests and work with requestors and technical stakeholders to resolve deficiencies.
• Support exception processing, including Component Local Service Assessment (CLSA) actions when required.
• Maintain the accuracy and compliance of existing PPSM registrations and support auditing of registered connectivity against actual technical implementations.
• Review technical firewall implementations associated with approved connectivity requests.
• Support the Connection Approval Process (CAP) and Systems/Network Approval Process (SNAP), including data collection, submission, deficiency resolution, renewals, exceptions, and status tracking.
• Ensure connectivity approval requests meet applicable Defense Information Systems Agency (DISA) requirements.
• Support enterprise whitelisting processes, including creation, review, registration, implementation, maintenance, and compliance of whitelist entries.
• Work with system and product owners to maintain accurate connectivity and whitelist registrations.
• Develop and maintain tactics, techniques, and procedures and other process documentation for connectivity registration, approval,…