VPN and DMZ Network Engineer

Primary responsibilities include, but are not limited to:

• Support Current Operations for the United States Navy by providing VPN, DMZ, and Firewall Network Engineering Subject Matter Expertise (SME) for the largest Intranet in the world. A qualified candidate for this position would be responsible for network modification, operation, integration, maintenance, security, and implementation of services for the as-fielded NMCI network.
• Collaborates with the Network Operations Center, Network Administrators, and the Network Engineering Team to define and/or continuously improve:
-Network Security Appliances (i.e. DMZ, VPN, Firewalls)
-Test and Validate Automation and best practice insertion opportunities.
-Leads development of Network SOPs/TTPs
-Continuous Service Improvements (CSI)
-System performance tuning and enhancements
-Create and maintain Engineering Implementation Plans (EIP)
• Plans and executes network upgrades and maintenance activities with the NMCI Operations Manager, NOC Lead, Release Management team and other key stakeholders.
• Tier III escalation support and vendor engagement supporting Incident Management activities.
• Active participation in Root Cause Analysis for Problem Management activities.

You'll Bring These Qualifications:
• Requires B.S. Degree and 4-8 years of prior relevant experience. Work experience may be substituted for degree at Hiring Manager's discretion.
• U.S. Citizen with an active DoD Secret security clearance.
• Must currently possess an active DoD 8570.01 IAT Level III Certification i.e. CCNP Security, CISSP, or CASP+.
• Must currently possess an active Associate level Network Vendor Certification (from one of the following Vendors): Cisco, Juniper, F5 Networks.
• Ability to work or be called in to work during off-hours to meet customer mission support requirements.
• Participate in on-call rotation for Incident Management responsibilities among the Transport Operations team.
• Network Subject Matter Expert for operations providing Tier-III support to the NOC watch staff.
• Perform highly technical maintenance and configuration to firewalls, VPNs, and DMZ appliances.
• Extensive experience engineering and troubleshooting networks, including routing, switching, MPLS, VPNs, routing protocols (i.e. BGP, OSPF, IS-IS), switching protocols (i.e. Spanning Tree Protocol, VLANs, LLDP, VoIP) Multicast protocols and emerging network technologies.
• Strong understanding and in-depth knowledge of IP network/subnet addressing.
• Extensive knowledge of defense-in-depth principles, Network architecture, Modern Network Topologies, Network appliance integrity, and common networking security elements.

• Ansible, Python, IaC network automation experience.

NGEN

Come break things (in a good way). Then build them smarter.

We're the tech company everyone calls when things get weird. We don't wear capes (they're a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for "how it's always been done."

Original Posting:

August 15, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $85,150.00 - $153,925.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Client-provided location(s): Honolulu, HI

Job ID: Leidos-R-00164574

Employment Type: FULL_TIME

Posted: 2025-08-15T18:50:35