Insider Threat Program Senior Network Engineer

Fairygodboss; Lorton (VA); On-site; USD 100,000 - 130,000; Full time

Job summary

Fairygodboss is looking for a Senior Network Engineer to support the Department of Homeland Security's Insider Threat Program. This critical role involves sustaining and evolving network infrastructure through advanced analytics and monitoring techniques.

The ideal candidate will hold a Bachelor's degree with substantial experience in LAN/WAN technologies and incident management. Key certifications include CCNP. Opportunity to work in a diverse environment committed to non-discrimination.

Qualifications

• 8+ years of relevant experience or 6+ years with a Master's.
• Experience with Cisco equipment installation and maintenance.
• Ability to obtain DHS EOD SCI clearance.

Responsibilities

• Support and maintain ITP network infrastructure.
• Oversee cross-domain data transfer solutions.
• Document configuration baselines and recapitalization plans.

Skills

Cisco Certified Network Professional (CCNP)

LAN/WAN Switches and Firewalls

Network Management (Solarwinds)

Incident response and mitigation

VMWARE and Linux familiarity

Education

Bachelors degree

Masters degree in related field

Tools

Cisco 2900/4500/9300/9400

Palo Alto Firewalls

Job description

Description

The Digital Modernization Sector at Leidos currently has an opening for a Senior Network Engineer supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support, sustain, design and evolve the network enterprise of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.

Responsibilities

• Support the ITP network infrastructure, perform all routine maintenance activities, provide guidance on upgrades and system recapitalization, perform availability/capacity management.
• Oversee High Speed Guard Cross Domain solution that supports the transfer of data between multiple classification domains.
• Support all documentation to effectively capture the configuration baseline.
• Design and support system recapitalization plans to account for capacity growth and changes as directed by the customer.
• Serve as the subject matter expert on all ITP network infrastructure.

Basic Qualifications

• Bachelors degree and (8)+ years of prior relevant experience or Masters with (6)+ years of prior relevant experience
• Cisco Certified Network Professional (CCNP)
• Engineering, Deployment and operations of LAN and WAN Switches, and Firewalls ensuring seamless integration into existing network infrastructure
• Working knowledge of defense‑in‑depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements
• Installs, configures, and maintain equipment including Cisco network and FW gear Cisco 2900, 4500, 9300, 9400, 6800 and Nexus 9000, and Cisco Firepower, ASA.
• Experience with and proven methods for managing the information security incident lifecycle, including incident response, mitigation, post‑action reporting, and mapping a path forward.
• Network Management experience with Solarwinds, or WhatsUP Gold, NetQoS, NetBrain
• Cross platform familiarity and experience with VMWARE, Linux, Microsoft Server and AD.
• Build firewall policy and optimized rule sets for improved efficiency and threat prevention.
• Deploy new network configuration to meet NIST/FISMA/STIG compliance requirements
• Support ATO reviews and Audits
• Ability to obtain DHS EOD SCI

Preferred Qualifications

• Master's degree from an accredited college or university in IT Management, Engineering, or related field
• Proven experience (10+ years) in IT service delivery management
• Experience with User Activity Monitoring products and platforms
• Experience with Everfox High Speed Guard Platform
• Experience with Cisco, Juniper LAN/WAN network infrastructure
• Experience with Palo Alto Firewalls
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Network Professional (CCNP) - Security
• Palo Alto Networks Accredited Configuration Engineer (ACE) - PAN‑OS 7.0 Version

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.