Network Security Engineer - Senior Security Clearance

Position: Network Security Engineer - Senior with Security Clearance
R
- Description Leidos is seeking a Sr. Network Security Engineer to join our AGUN Migration team.  This position will be 100% remote with some associated travel. The AGUN program is a highly demanding mission and requires expert technical and professional management to support the Army’s global wide area network and security infrastructure. This role is remote and will be supporting a large and complex network migration and operations for the US Army.

PRIMARY RESPONSIBILITIES:

* Operate and maintain secure network solutions operated as a centralized enterprise capability for the United States Army
* Partner with key stakeholders and technical experts to perform legacy environment discovery, assessing current capabilities, configurations, and requirements to provide network firewall migration support for the Army global network.

* Analyze and understand complex firewall security zones and policies with the ability to transform policies between multiple vendor firewall devices while meeting mission requirements.

* Support secure access solutions leveraging zero trust network access (ZTNA) including support for creation of new access policies and maintenance of existing policies.

* Integrate capacity planning and scaling of network and security stack environments into the overall operational support processes and staff.
* Collect, investigate, and identify network resource management strategies and techniques to meet capacity and performance requirements  
* Work with information assurance teams and the AGUN cybersecurity service provider (CSSP) to ensure compliance to DoD standards to assist with maintenance of the network security posture.
* Document designs, diagrams, drawings, and technical narratives using wiki technologies and common diagram and drawing tools.

BASIC QUALIFICATIONS:

* Must currently possess and be able to maintain an active DoD SECRET security clearance
* Minimum of a Bachelor’s degree with 10+ years' experience or Master's degree with 10+ years of experience (additional years of directly applicable experience may be accepted in lieu of a degree).
* Require active DoD IAT Level II (i.e. Security+) certification or equivalent prior to start. Must obtain and maintain an approved Computing Environment (CE) certification applicable to the supported technology environment within six (6) months of hire.
* Expert understanding of networking and virtualization of firewalls including VSYS in a multi-tenant environment
* Demonstrated experience with networking concepts such as LAN, WAN, BGP, TCP/UDP, IPSec, VPN, Routing(L2/L3), and firewalls in a virtualized environment.
* Demonstrate experience in one or more of the following enterprise network management tools such as Palo Alto Panorama, Cisco Prime, Cisco DNA, or Junos Space.
* Demonstrate experience in system hardening of network infrastructure to include DoD STIG implementation
* Must have experience in working with two or more of the following vender network technologies:
Cisco, Juniper, Palo Alto, Dell, RAVPN, Global Protect, or App Gate.
* Experience with the following protocols: SFTP, SSH, SCP, MPLS, SNMP, NTP.
* Must be able to work as part of a team to execute troubleshooting and resolve complex network security issues.
* Must have excellent written and verbal communication skills.  
* Must be willing to work non-standard shifts to accomplish network migration objectives and goals
* Must be able to interface with customers.
* Must be willing to travel up to 10% of the time.

PREFERRED QUALIFICATIONS:

* Army/DISA migration experience.
* Hands on experience with Palo Alto Next Generation Firewalls (NGFW)
* Knowledge and use of Net Sec Ops  technologies including git, Gitlab CI/CD, Ansible, Terraform, Puppet, and network element managers
* Working knowledge and understanding of Python
* Demonstrate expertise in design and improvement of complex and geographically enterprise networks.
* Expert knowledge of US Army security requirements for network infrastructure. If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers.…