CSfC Network Architect & Security SME

Leidos; Fort Belvoir (VA); On-site; USD 120,000 - 150,000; Full time

Job summary

Leidos is seeking an experienced Network Engineer (SME) to support a major DoD modernization program at Fort Belvoir, VA. The role focuses on CSfC network design, secure VPNs, and multi-layer security across Cisco/Aruba platforms.

Candidates must hold an active TS/SCI clearance, DoD 8570 IAT Level II/III, and extensive DoD network engineering experience. Strong PKI, ISE/ClearPass, and CNSA familiarity are required for this critical mission role.

Qualifications

• Active TS/SCI clearance required at time of consideration.
• DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certs required (e.g., Security+ CE, CySA+, CASP+, CISSP).
• Experience configuring Cisco IOS-XE/ASR and Aruba VPNs with IKEv2.
• Experience with Palo Alto NGFW, App-ID, User-ID, and URL filtering.
• Experience deploying 802.1X with Cisco ISE or Aruba ClearPass.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure across multi-layer networks.
• Configure CSfC architectures aligned with NSA packages; ensure compliance and encryption mandates.
• Implement and tune IPsec/SSL VPNs and dynamic routing (BGP/OSPF).
• Audit NGFW policies, IDS/IPS, and network access control.
• Prepare CSfC compliance artifacts and PMO submission packages.

Skills

CSfC Architecture

BGP/OSPF

802.1X/EAP-TLS

ISE/ClearPass

IPsec VPN

Palo Alto NGFW

PKI/OCSP

NSA CSfC

Education

Bachelor's degree or higher in STEM

DoD 8570 IAT Level II/III

Active TS/SCI

CCNP/CCIE or equivalent

Tools

Cisco IOS-XE/ASR

Aruba Mobility Controllers

Palo Alto PAN-OS

Cisco ISE

Aruba ClearPass

PKI management tools

Job description

Leidos is seeking an experienced Network Engineer (SME) to support a major DoD modernization program at Fort Belvoir, VA. The role focuses on CSfC network design, secure VPNs, and multi-layer security across Cisco/Aruba platforms.

Candidates must hold an active TS/SCI clearance, DoD 8570 IAT Level II/III, and extensive DoD network engineering experience. Strong PKI, ISE/ClearPass, and CNSA familiarity are required for this critical mission role.