Senior Network Security Architect: Zero-Trust & Segmentation

Leidos; Odenton (MD); On-site; USD 116,000 - 210,000; Full time

Job summary

Leidos is seeking an experienced Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large, distributed network environment. The role advances security architecture through strategic designs and implementation plans, directing a team of engineers under aggressive timelines.

The successful candidate will lead security engineering efforts, assess current architecture, define segmentation models, and drive secure connectivity across on-prem,

Qualifications

• Bachelor's degree or equivalent experience and 12+ years of prior relevant experience, or Master's with 10+ years of experience.
• Significant experience designing and implementing network security architecture in complex, large-scale enterprise environments.
• Experience serving as a senior technical lead directing the work of network and security engineers, administrators, analysts, or implementation resources.
• Hands-on engineering experience with next-generation firewalls, intrusion detection and prevention systems, proxies and TLS inspection, VPN and encryption services, and network access control platforms.
• Working knowledge of Federal Government security requirements such as NIST, FedRAMP, FISMA, RMF, DISA STIGs, and DoD cybersecurity requirements.

Responsibilities

• Design, engineer, and implement enterprise network security architecture spanning next-generation firewalls, IDS/IPS, web and TLS proxies, VPN and encryption services, network access control, DNS security, and east-west security controls.
• Evaluate current network security architecture, identify gaps, estimate level of effort, assess risk, and develop engineering plans to strengthen security.
• Lead network segmentation and secure connectivity efforts, including data-flow mapping, firewall rule review, routing and policy coordination, cutover sequencing, and stakeholder approval.
• Advance zero-trust networking, micro-segmentation, least-privilege access policy, and encrypted-transport strategies across the enterprise.
• Engineer secure connectivity between on-premises, cloud, and remote environments (IPsec/TLS VPN) and tune controls to reduce false positives.

Skills

Network security

Security architecture

Leadership

Communication

Zero trust

Encrypted traffic

Education

Bachelor's degree or equivalent experience

IAT Level II or higher (Security+ / CISSP)

Tools

Palo Alto

Cisco

Aruba

Infoblox

Brocade

Job description

Leidos is seeking an experienced Principal Network Security Engineer to design, engineer, and implement enterprise network security across a large, distributed network environment. The role advances security architecture through strategic designs and implementation plans, directing a team of engineers under aggressive timelines.

The successful candidate will lead security engineering efforts, assess current architecture, define segmentation models, and drive secure connectivity across on-prem,