Cloud Network Engineer

Leidos' Defense Sensors is seeking a Cloud Network Engineer to join its team, working on missile defense projects within the BMD Simulations and Analysis Portfolio. As a Cloud Network Engineer, you will design, build, and operate high-performance, zero-trust network architecture spanning on-premises data centers, public cloud environments (e.g., AWS, Azure), and classified enclave-based domains.

Responsibilities:

• Design and deploy secure networks, architecting and configuring restricted computer networks and secure inter-domain routes.
• Implement network segmentation, access controls, and policy enforcement across cloud and on-premise resources.
• Build and manage cloud networking infrastructure (AWS, Azure, GCP, etc.).
• Configure and troubleshoot multicast UDP and broadcast UDP traffic for high-throughput applications.
• Deploy and maintain Software Defined Network (SDN) platforms and hardware-based network appliances.
• Integrate network services with Kubernetes using CNI plugins and container-based networking.
• Connect remote cloud instances to on-premise data centers, ensuring reliable routing and latency optimization.
• Support hybrid cloud architectures and remote enclave connectivity.
• Automate network provisioning and changes using IaC tools (e.g., Terraform, Ansible).
• Implement robust monitoring, logging, and alerting for network health and security events.
• Work closely with security, DevOps, and application teams to define network access protocols and rules.
• Produce clear documentation, runbooks, and knowledge base articles for all network solutions.

Basic Qualifications:

• Bachelor's degree with 5 years of prior relevant experience or master's with 3 years of prior relevant experience.
• Network design experience: proven experience setting up restricted/compliant networks and securing inter-domain/enclave communication.
• Cloud networking: hands-on experience with cloud networking services (VPC, VNets, peering, transit gateways).
• Linux operating systems: experience with Linux OS.
• Multicast/UDP: practical knowledge of multicast UDP and broadcast UDP traffic handling.
• SDN/hardware defined networking: experience with both software-defined and hardware-defined networking technologies.
• Kubernetes-based networking: direct experience designing, deploying, and troubleshooting networking within Kubernetes clusters.
• Secure routing across domains: ability to create and manage secure routing paths between isolated domains or enclaves.
• Active secret clearance.
• Full-time onsite support.
• Candidate must be a resident of the North Alabama area.

Preferred Qualifications:

• CNI expertise – experience with one or more Container Network Interfaces (CNI): Cilium, Calico, Multus, or similar.
• Enterprise software hosting – background deploying and supporting enterprise-grade applications in production environments.
• Network access policy development – experience defining and governing network access protocols, firewall rules, and zero-trust policies.
• Container mesh architecture – familiarity with container-based network meshes (e.g., Istio, Linkerd) and service mesh concepts.
• Cloud-to-cloud routing – experience routing traffic between multiple cloud service provider instances.
• Hybrid cloud infrastructure – proven work with hybrid cloud models linking remote clouds to on-premise resources.
• Strong analytical and problem-solving abilities; comfortable troubleshooting complex network issues.
• Excellent communication skills – able to translate technical concepts for non-technical stakeholders.
• Proactive mindset with a focus on security, reliability, and scalability.
• Ability to work autonomously and as part of a cross-functional team.
• Relevant certifications (e.g., CCNA/CCNP, AWS Certified Advanced Networking, Certified Kubernetes Administrator) are a plus.