VPN - DMZ and WAN Network Engineer

VPN - DMZ and WAN Network Engineer at Leidos summary:

Leidos seeks a VPN, DMZ and WAN Network Engineer to design, implement, and maintain secure global network solutions for the Navy-Marine Corps Intranet (NMCI). The role requires hands-on configuration and troubleshooting of firewalls, VPNs, DMZs, Cisco and Juniper devices, WAN technologies, routing protocols, and participation in incident, change, and problem management with DoD security compliance (STIGs). Candidates must be U.S. citizens with an active DoD Secret clearance, relevant vendor certifications (e.g., Cisco/Juniper/F5), and 4–8 years of experience or equivalent.

Description

Leidos currently has an opening on the ‘Service Management, Integration and Transport’ (SMIT) Contract for a VPN (Virtual Private Network), WAN (Wide Area Network) & DMZ (Demilitarized Zone) Network Engineer located in Norfolk, VA.

Join our team to support the SMIT mission, the largest IT services program for the United States Navy. As part of the Leidos team, you will play a pivotal role in delivering the Navy-Marine Corps Intranet (NMCI) to customers around the globe. We are seeking a skilled VPN, WAN & DMZ Network Engineer proficient in network engineering appliances and technologies (i.e., Firewalls, DMZ, VPN, WAN, Cisco solutions) to join our Transport Operations team. In this role, you will be responsible for designing, implementing, and maintaining robust & mature global network security solutions.

Your expertise in configuring enterprise-grade Juniper firewalls, managing DMZ environments, engineering secure VPN solutions, administering Cisco network appliances (such as Cisco ASA, Cisco Firepower, and Cisco ISR/ASR routers), and supporting WAN infrastructure will be crucial. You will collaborate closely with cross-functional engineering and project management teams to safeguard our network infrastructure against threats and vulnerabilities, ensuring the highest levels of operational integrity. You will be a member of a technical team, managing customer relationships and overseeing key resources for Incident Response, Change Management, Problem Management, Operations and Maintenance (O&M), and ITSM and DevSecOps initiatives.

Primary Responsibilities Include, but Are Not Limited To:

• Support Current Operations for the United States Navy by providing VPN, WAN, DMZ, Firewall, and Cisco Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world. A qualified candidate for this position would be responsible for network modification, operation, integration, maintenance, security, and implementation of services for the as-fielded NMCI network.
• Collaborates with the Network Operations Center, Network Administrators, and the Network Engineering Team to define and/or continuously improve:
  • Network Security Appliances (i.e., DMZ, VPN, Firewalls, WAN, Cisco ASA/Firepower solutions).
  • Test and Validate Automation and best practice insertion opportunities.
  • Leads development of Network SOPs/TTPs.
  • Continuous Service Improvements (CSI).
  • System performance tuning and enhancements.
  • Create and maintain Engineering Implementation Plans (EIP).
• Plans and executes network upgrades and maintenance activities with the NMCI Operations Manager, NOC Lead, Release Management team, and other key stakeholders.
• Tier III escalation support and vendor engagement supporting Incident Management activities.
• Active participation in Root Cause Analysis for Problem Management activities.

Secondary Responsibilities:

• Ensure compliance with Security Technical Implementation Guides (STIGs) and pre-STIGs to maintain secure and compliant network configurations.
• Develop and maintain Enterprise Infrastructure Planning (EIP) documentation to support network design, implementation, and lifecycle management.
• Support the Contract Data Requirements List (CDRL) processes by preparing and delivering required documentation, reports, and deliverables in accordance with contract requirements.
• Conduct pre-STIG assessments and remediation to ensure systems meet Department of Defense (DoD) security standards prior to formal STIG implementation.
• Collaborate with stakeholders to align network engineering efforts with enterprise-level infrastructure planning and ensure adherence to established processes and standards.

You'll Bring These Qualifications:

• Requires B.S. Degree and 4-8 years of prior relevant experience. Work experience may be substituted for degree at Hiring Manager’s discretion.
• U.S. Citizen with an active DoD Secret security clearance.
• Must currently possess an active DoD 8570.01 IAT Level II Certification i.e., CCNP Security, CISSP, or CASP+.
• Must currently possess an active Associate-level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, F5 Networks.
• Ability to work or be called in to work during off-hours to meet customer mission support requirements.
• Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team.
• Network Subject Matter Expert for operations providing Tier-III support to the NOC watch staff.
• Perform highly technical maintenance and configuration to firewalls, VPNs, DMZ appliances, WAN infrastructure, and Cisco network devices.
• Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, WAN technologies, routing protocols (i.e., BGP, OSPF, IS-IS), switching protocols (i.e., Spanning Tree Protocol, VLANs, LLDP, VoIP), Multicast protocols, and emerging network technologies.
• Strong understanding and in-depth knowledge of IP network/subnet addressing.
• Extensive knowledge of defense-in-depth principles, Network architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements.

Preferred Skills:

• Experience with Cisco network appliances, including Cisco ASA, Cisco Firepower, Cisco ISR/ASR routers, and Cisco Catalyst switches.
• Proficiency in configuring and troubleshooting Cisco VPN solutions, including AnyConnect and site-to-site VPNs.
• Familiarity with Cisco SD-WAN technologies and Cisco DNA Center for network automation and management.
• Ansible, Python, IaC network automation experience.
• Palo Alto, Juniper, Cisco, Arista experience.
• IPS (Intrusion Prevention Systems) Trellix Juniper experience.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit .

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at .

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected] .

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission .

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Keywords:

WAN engineer, VPN engineer, DMZ security, Cisco ASA Firepower, Juniper firewalls, DoD STIG compliance, Network automation Ansible Python, Routing protocols BGP OSPF, NMCI network operations, Network security engineer