Leidos Digital sector is seeking an experienced Senior Network Engineer to support mission-critical, enterprise-scale network infrastructure on the AFNCR ITS program at Joint Base Andrews (JBA) & Joint Base Anacostia-Bolling (JBAB). In this role, you will be responsible for the end-to-end administration, deployment, security, and operational reliability of classified and unclassified core network hardware, boundary protections, High-Assurance IP Encryptors (HAIPEs), and data center switches.

The ideal candidate brings deep technical expertise in Cisco enterprise and data center platforms, DoD STIG compliance, network telemetry, and collaborative incident resolution with defense agency stakeholders (e.g., 26th NOS, DISA).

If this sounds like the kind of environment where you can thrive, keep reading!

The Leidos Digital Sector is focused on digital modernization services such as enterprise IT solutions, cloud migrations, cybersecurity, analytics, SecDevOps, digital experience monitoring, and AI-enabled operations.

Are you ready to make an impact?

Begin your journey of a flourishing and meaningful career, share your resume with us today!

Work Schedule: Mon-Fri 10:00am – 6:00pm (Core Shift) | On-Call / Operational Standby Rotation.

Primary Responsibilities:

• Deploy, provision, configure, and maintain high-availability data center routing and switching hardware, including Cisco Catalyst and Nexus Series platforms, as well as high-performance server network interfaces.
• Maintain comprehensive physical and logical infrastructure records, including exact rack elevation diagrams, patch and port maps, cable plant documentation, and physical asset management databases.
• Identify single-points-of-failure (SPOF) proactively across the network topology and implement redundancy and fault-tolerant architectures.
• Administer enterprise-level centralized network management platforms, utilizing Cisco Catalyst Center (formerly DNA Center) and Cisco Identity Services Engine (ISE) for device profiling, automated access control, and 802.1X policy enforcement.
• Manage and configure F5 Application Delivery Controllers (LTM/GTM) to ensure high availability, load balancing, and traffic distribution across core application tiers.
• Administer RSA Authentication Manager solution to facilitate Multi-Factor Authentication (MFA) for network devices and appliances.
• Install, configure, key, and maintain Type-1 High-Assurance IP Encryptors (HAIPEs), including TACLANE (KG-175D, KGV-72) and associated cryptographic equipment across classified and unclassified enclaves.
• Harden all network elements and perimeter boundary devices in strict accordance with DISA Security Technical Implementation Guides (STIGs) and DoD cybersecurity directives.
• Partner with cybersecurity and facility teams to ensure physical and logical boundary protection controls meet Defense Information Systems Agency (DISA) audit readiness.
• Monitor network performance, capacity metrics, and environmental health utilizing Cacti and enterprise SNMP-based telemetry tools.
• Deploy, maintain, and troubleshoot multicast routing architectures (e.g., PIM, IGMP snooping) supporting enterprise Internet Protocol Television (IPTV) systems over local area networks.
• Act as the primary technical point of contact (POC) interfacing with enterprise operational entities, including the 26th Network Operations Squadron (26th NOS) and DISA, facilitating rapid troubleshooting and resolution during network outages or degraded conditions.
• Author, coordinate, and shepherd Authorized Service Interruptions (ASIs) through change governance boards, ensuring detailed rollback plans and proactive stakeholder communications.
• Formulate, standardize, and maintain detailed Standard Operating Procedures (SOPs) and runbooks aligned with Air Force instructions, environmental standards, and safety policies.
• Participate in disaster recovery (DR) exercises, execute regular system backups, and validate physical/logical restoration procedures.
• Participate in a recurring Tier-3 operational standby / on-call rotation to address emergent off-hours operational degradations.

Basic Qualifications:

• Typically requires BS degree and 8+ years of prior relevant experience or Masters with 6+ years of prior relevant experience, additional years of applicable experience will be accepted in lieu of a degree.
• Clearance: Active DoD Secret security clearance (U.S. Citizenship required).
• Must meet DoD 8140 IAT Level II or III baseline certification requirements: Cisco Certified Network Associate (CCNA) OR Cisco CCNP Enterprise. CompTIA Security+ CE Optional.
• Demonstrated hands-on engineering experience configuring and maintaining Cisco Catalyst and Cisco Nexus switches/routers.
• Proven experience administering Cisco Catalyst Center (DNA Center), Cisco ISE, and F5 BIG-IP (LTM/GTM).
• Direct hands-on experience loading key material, configuring, and maintaining TACLANE / HAIPE hardware (KG-175D, KGV-72).
• Working knowledge of DISA STIG implementation and network compliance remediation.
• Practical understanding of multicast routing protocols (PIM-SM/DM, IGMP) and SNMP monitoring tools (e.g., Cacti).

Preferred Qualifications:

• Practical scripting ability in Python and/or automation using Ansible for network provisioning and configuration drift auditing.
• Familiarity with Cisco SD-WAN and Cisco Application Centric Infrastructure (ACI) fabric architectures.
• In-depth knowledge of IPv6 addressing schemes, dual-stack configurations, and routing protocols.
• Familiarity operating within air-gapped systems and classified defense networks (e.g., SIPRNet).
• Prior operational exposure supporting Air Force, Pentagon, or Air Force National Capital Region (AFNCR) network footprints (including Joint Base Andrews [JBA] and Joint Base Anacostia-Bolling [JBAB]).

#AFNCR

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.