Firewall, VPN & DMZ Network Engineer

We are seeking a skilled Firewall & VPN Network Engineer to join our Transport Operations team on the ‘Service Management, Integration and Transport’ (SMIT) Contract. As part of the Leidos team, you will play a pivotal role in delivering the Navy-Marine Corps Intranet (NMCI) to customers around the globe.

The successful candidate will be responsible for designing, implementing, and maintaining robust & mature global network security solutions. Your expertise in configuring enterprise-grade Juniper firewalls, managing DMZ environments, engineering secure Firewall/VPN solutions, and administering Cisco network appliances will be crucial.

Primary Responsibilities

• Support Current Operations for the United States Navy by providing VPN, DMZ, and Firewall Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world.
• Collaborate with the Network Operations Center, Network Administrators, and the Network Engineering Team to define and/or continuously improve:

+ Network Security Appliances (i.e., DMZ, VPN, Firewalls) + Test and Validate Automation and best practice insertion opportunities. + Lead development of Network SOPs/TTPs + Continuous Service Improvements (CSI) + System performance tuning and enhancements + Create and maintain Engineering Implementation Plans (EIP)

• Plan and execute network upgrades and maintenance activities with the NMCI Operations Manager, NOC Lead, Release Management team, and other key stakeholders.
• Tier III escalation support and vendor engagement supporting Incident Management activities.
• Active participation in Root Cause Analysis for Problem Management activities.

Requirements

• B.S. Degree and 8–12 years of prior relevant experience.
• U.S. Citizen with an active DoD Secret security clearance.
• Must currently possess an active DoD 8570.01 IAT Level III Certification, i.e., CCNP Security, CISSP, or CASP+.
• Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, Palo, F5 Networks.
• Ability to work or be called in to work during off-hours to meet customer mission support requirements.
• Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team.
• Network Subject Matter Expert for operations providing Tier-III support to the NOC watch staff.
• Perform highly technical maintenance and configuration to firewalls, VPNs, and DMZ appliances.
• Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols (i.e., BGP, OSPF, IS-IS), switching protocols (i.e., Spanning Tree Protocol, VLANs, LLDP, VoIP), Multicast protocols, and emerging network technologies.
• Strong understanding and in-depth knowledge of IP network/subnet addressing.
• Extensive knowledge of defense-in-depth principles, Network architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements.
• Ansible, Python, IaC network automation experience.

Benefits

• Pay Range: $87,100.00 - $157,450.00