CSfC Network Engineer SME: Secure Dual-Tunnel Architect

Socket.dev; Fort Belvoir (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Leidos is seeking an experienced Network Engineer (SME) to join the I3TS team supporting a major digital modernization program at Fort Belvoir, VA. The role requires an active TS/SCI clearance and U.S.

citizenship, with responsibilities spanning CSfC architecture, secure VPNs, and NSA compliance artifacts. The candidate will architect, deploy, and operate CSfC networks across Cisco/Aruba devices, tune Palo Alto security policies, and manage ISE/ClearPass for 802.1X access control.

Qualifications

• Bachelor's degree or higher in Computer Science, Information Technology, Engineering, Engineering Management, MIS, or related STEM field, and 12-15 years of relevant experience.
• 12+ years of progressive network engineering experience within DoD/DoW, federal, or defense contractor environments.
• Active TS/SCI Clearance
• Active DoD 8570.01-M / DoD 8140 IAT Level II or III baseline certification (e.g., Security+ CE, CySA+, CASP+, or CISSP).
• Active Computing Environment certification, including one or more of: Cisco CCNA, CCNP, Aruba ACSA or ACSP
• Proven expertise configuring Cisco/Aruba IPsec and SSL VPNs (IKEv2, CNSA crypto) and dynamic routing (BGP, OSPF).
• Palo Alto firewalls, Panorama, IDS/IPS inspection profiles.
• Cisco ISE and Aruba ClearPass 802.1X deployment experience.

Responsibilities

• Architect, deploy, and maintain CSfC infrastructure within Black/Gray/Red networks.
• Design, configure, and maintain CSfC architectures aligned with NSA packages.
• Implement enterprise routing protocols (BGP, OSPF) with IPsec VPN tunnels.
• Author, optimize, and audit Palo Alto NGFW policies and signatures.
• Configure 802.1X with ISE/ClearPass, RADIUS/TACACS+, posture assessment.
• Prepare CSfC compliance artifacts and PMO submissions.

Skills

Network engineering

Security policy

IPsec/SSL VPNs

BGP/OSPF

IDS/IPS

IIT/EIT/PKI

ISE/ClearPass

CSfC/NSA compliance

Education

Bachelor's degree or higher in CS/IT/Engineering

Tools

Cisco IOS-XE/ASR

Aruba Mobility Controllers

Palo Alto PAN-OS

Cisco ISE/Aruba ClearPass

Job description

Leidos is seeking an experienced Network Engineer (SME) to join the I3TS team supporting a major digital modernization program at Fort Belvoir, VA. The role requires an active TS/SCI clearance and U.S.

citizenship, with responsibilities spanning CSfC architecture, secure VPNs, and NSA compliance artifacts. The candidate will architect, deploy, and operate CSfC networks across Cisco/Aruba devices, tune Palo Alto security policies, and manage ISE/ClearPass for 802.1X access control.