ITP Senior Network Engineer

Leidos; Lorton (VA); On-site; USD 116,000 - 210,000; Full time

Job summary

Leidos is seeking an ITP Senior Network Engineer in the Digital Sector to support the DHS Insider Threat Program. You will help sustain, design and evolve the network enterprise across classified domains.

Responsibilities include maintaining the ITP network, overseeing Cross Domain solutions, documenting configurations, and planning capacity growth. The role requires CCNP and 12–15 years of relevant experience, with knowledge of Cisco gear and security standards.

Qualifications

• Bachelor's degree with 12–15 years of relevant experience.
• CCNP certification required.
• Experience engineering, deploying and operating LAN/WAN switches and firewalls.
• Working knowledge of defense-in-depth principles, security architecture and IT device integrity.
• Experience with Cisco gear (Cisco 2900/4500/9300/9400, Nexus 9000, ASA/Firepower).
• Experience managing security incidents (incident lifecycle, response, reporting).
• Network management with SolarWinds, WhatsUp Gold, NetQoS, NetBrain.
• Cross‑platform familiarity with VMware, Linux, Windows Server and AD.

Responsibilities

• Support the ITP network infrastructure and perform routine maintenance.
• Oversee High Speed Guard Cross Domain solution for data transfer between domains.
• Support documentation to capture configuration baseline.
• Design and support system recapitalization for capacity growth.
• Serve as SME on all ITP network infrastructure.

Skills

CCNP

LAN/WAN

Security architecture

Incident lifecycle

Education

Bachelor's degree

Master's degree

Tools

Cisco 2900/4500/9300/9400

Nexus 9000

Firepower/ASA

SolarWinds/WhatsUp Gold/NetBrain

VMware/Linux/AD

Job description

The Digital Sector at Leidos currently has an opening for a ITP Senior Network Engineer supporting the HEITS Contract as part of the Department of Homeland Security (DHS) Insider Threat Program (ITP). This is an exciting opportunity to use your experience to support, sustain, design and evolve the network enterprise of the ITP. The ITP mission is to identify insider threats to the department by utilizing advanced analytics, monitoring, and data correlation which in turn help address and eliminate potential threat actors from compromising the DHS mission in safeguarding the homeland.

The selected candidate will be responsible for the following:

• Support the ITP network infrastructure, perform all routine maintenance activities, provide guidance on upgrades and system recapitalization, perform availability/capacity management.
• Oversee High Speed Guard Cross Domain solution that supports the transfer of data between multiple classification domains.
• Support all documentation to effectively capture the configuration baseline.
• Design and support system recapitalization plans to account for capacity growth and changes as directed by the customer.
• Serve as the subject matter expert on all ITP network infrastructure.

Basic Qualifications

• Bachelors degree 12-15 years of prior relevant experience. Additional education and experience may be considered in lieu of a degree
• Cisco Certified Network Professional (CCNP)
• Engineering, Deployment and operations of LAN and WAN Switches, and Firewalls ensuring seamless integration into existing network infrastructure
• Working knowledge of defense-in-depth principles, network/HW/SW security architecture, network topology, IT device integrity, and common security elements
• Installs, configures, and maintain equipment including Cisco network and FW gear Cisco 2900, 4500, 9300, 9400, 6800 and Nexus 9000, and Cisco Firepower, ASA.
• Experience with and proven methods for managing the information security incident lifecycle, including incident response, mitigation, post-action reporting, and mapping a path forward.
• Network Management experience with Solarwinds, or WhatsUP Gold, NetQoS, NetBrain
• Cross platform familiarity and experience with VMWARE, Linux, Microsoft Server and AD.
• Build firewall policy and optimized rule sets for improved efficiency and threat prevention.
• Deploy new network configuration to meet NIST/FISMA/STIG compliance requirements
• Support ATO reviews and Audits
• Ability to obtain DHS EOD SCI

Preferred Qualifications

• Master's degree from an accredited college or university in IT Management, Engineering, or related field
• Proven experience (10+ years) in IT service delivery management
• Experience with User Activity Monitoring products and platforms
• Experience with Everfox High Speed Guard Platform
• Experience with Cisco, Juniper LAN/WAN network infrastructure
• Experience with Palo Alto Firewalls
• Certified Information Systems Security Professional (CISSP)
• Cisco Certified Network Professional (CCNP) - Security
• Palo Alto Networks Accredited Configuration Engineer (ACE) - PAN-OS 7.0 Version

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Pay Range: Pay Range $116,350.00 - $210,325.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.