# Network Engineer - Wide Area Network Focused

**Company**: Leidos
**Location**: Hampton, VA
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: $59,150.00 - $106,925.00
**Category**: Engineering
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Hampton-VA/Network-Engineer---WAN---2nd-Shift_R-00195469?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9eaca1fa-aa0

## Description

The Defense Sector at Leidos is seeking a cleared Wide Area Network (WAN) Engineer to engineer, operate, and sustain long-haul transport and routing infrastructure across Department of Defense (DoD/DoW) networks.

This individual assists in routing troubleshooting for the enterprise WAN – working the watch floor to resolve issues with the Enterprise WAN and is accountable for the availability, performance, and STIG compliance of circuits supporting operational mission traffic worldwide.

**Roles and Responsibilities:**

- Maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.

- Execute circuit installations, migrations, bandwidth upgrades, and site cutovers with documented rollback plans and minimal mission impact.

- Develop and maintain routing policy standards, IP address and ASN allocation plans, and authoritative network documentation including logical and physical topology diagrams.

- Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.

- Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule and validate maintenance actions and outage restoration.

- Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.

- Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.

**Required Qualifications:**

- Clearance: US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date.

- Education: Bachelor’s degree with 2+ years of experience or a Master’s degree with 1+ years of experience. Additional experience may be considered in lieu of a degree.

- Certifications: DoD 8570/8140 IAT Level II certification (Security+ CE or equivalent) plus an active CCNP Enterprise, JNCIP-SP, or equivalent routing certification preferred.

- Experience: 2+ years of hands-on enterprise WAN engineering and operations experience, with demonstrated ownership of multi-site routed transport in a DoD environment.

- BGP Expertise:

- Configuration and troubleshooting of eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs.

- Ability to tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending.

- Experience establishing and sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers.

- Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation.

- Routing & Transport: Proficiency with OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations.

- Platforms: Hands-on administration of Cisco (IOS-XE/IOS-XR/NX-OS) and Juniper (Junos) routing platforms in an operational production network.

- Encryption & Circuits: Experience with Type 1 inline network encryptors (TACLANE/KG-175, HAIPE) and with DISA circuit lifecycle actions (TSR/TSO, DISA Direct/SNAP).

- Compliance: Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes.

- Troubleshooting: Demonstrated packet-level analysis skill using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments.

- Shift Flexibility: Willingness to work evening and rotational shifts (e.g., 3:00 PM-11:00 PM), including weekends and holidays occasional CONUS/OCONUS travel may be required.

**Preferred Qualifications:**

- Advanced Certification: CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III (CASP+ or CISSP).

- Segment Routing & MPLS-TE: Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.

- SD-WAN: Hands-on experience with Cisco SD-WAN or Juniper SDWAN or comparable overlay transport in a DoD/DoW deployment.

- Automation: Proficiency with Python, Ansible, for configuration deployment, compliance auditing, and network state validation.

- DoD Enterprise Services: Familiarity with JRSS, DODIN operations, and DoD boundary/CDS architectures.

- Optical Transport: Working knowledge of DWDM, SONET/SDH, and carrier Ethernet handoffs supporting long-haul circuits.

## Skills

### Required
- BGP
- Cisco
- Juniper
- DISA STIGs
- RMF
- IAVA remediation
- Wireshark
- NetFlow
- SolarWinds
- Python
- Ansible

### Nice to have
- CCIE Enterprise Infrastructure
- JNCIE-SP
- DoD 8570/8140 IAT Level III
- Segment Routing
- MPLS-TE
- EVPN
- SD-WAN
- JRSS
- DODIN operations

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Hampton-VA/Network-Engineer---WAN---2nd-Shift_R-00195469?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)