CSfC Network Engineer SME — TS/SCI Clearance

Leidos Inc; Fort Belvoir (VA); On-site; USD 140,000 - 200,000; Full time

Job summary

Leidos is seeking an experienced Network Engineer (SME) to join the I3TS team supporting the DTRA modernization program at Fort Belvoir, VA. The role requires active TS/SCI clearance and US citizenship.

You will architect and operate CSfC networks, configure IPsec/SSL VPNs, BGP/OSPF, and manage Palo Alto NGFW policies, Cisco ISE or Aruba ClearPass, and PKI services, delivering compliant NSA CSfC artifacts.

Qualifications

• Active TS/SCI clearance is required.
• 12-15 years of progressive network engineering experience in DoD/federal environments.
• Bachelor's degree or higher in a STEM field.
• Experience with CSfC architectures and NSA capability packages is preferred.

Responsibilities

• Architect, deploy, and manage CSfC networks across multiple security levels.
• Configure IKEv2/IPsec and SSL VPNs and dynamic routing (BGP/OSPF).
• Develop and audit security policies with Palo Alto firewalls and IDS/IPS.
• Implement 802.1X with Cisco ISE or Aruba ClearPass.
• Manage PKI lifecycle, CAs, OCSP, and secure NTP.
• Prepare NSA CSfC compliance artifacts and PMO registrations.

Skills

TS/SCI Clearance

DoD network engineering

Cisco IOS-XE/ASR

Palo Alto PAN-OS

Aruba ISE/ClearPass

BGP/OSPF routing

CSfC knowledge

PKI/OCSP

NSA CSfC familiarity

Ansible configuration backups

Education

Bachelor's degree in CS/IT/Engineering

Tools

Cisco IOS-XE

Aruba Mobility Controllers

Palo Alto PAN-OS

Cisco ISE

Aruba ClearPass

PKI infrastructure

NTP/CA infrastructure

Job description

Leidos is seeking an experienced Network Engineer (SME) to join the I3TS team supporting the DTRA modernization program at Fort Belvoir, VA. The role requires active TS/SCI clearance and US citizenship.

You will architect and operate CSfC networks, configure IPsec/SSL VPNs, BGP/OSPF, and manage Palo Alto NGFW policies, Cisco ISE or Aruba ClearPass, and PKI services, delivering compliant NSA CSfC artifacts.