Job Leidos - Network Architect Engineer Senior- SMIT Navy 909 with Security Clearance

Description On-site in Norfolk, VA Our client seeks a Firewall, VPN, and DMZ Network Engineer to support the SMIT program for the United States Navy. The role focuses on designing, implementing, and maintaining network security solutions across Juniper firewalls, DMZ environments, VPN architectures, and Cisco network appliances. The engineer will collaborate with cross-functional teams to protect infrastructure, lead SOP and TTP development, and support Incident, Change, and Problem Management within a mature operations environment.

Due to federal security clearance requirements, applicant must be a United States Citizen with an active Secret clearance. Due to client requirements, applicants must be willing and able to work on a w2 basis. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $70.00 to $75.00/hr. w2 Job Number #: JN -112026-109382 Responsibilities Provide VPN, DMZ, and Firewall Network Engineering subject matter expertise to support United States Navy operations on the NMCI network, including modification, operation, integration, maintenance, security, and service implementation. Collaborate with the Network Operations Center, Network Administrators, and Network Engineering teams to improve network security appliances and operational practices. Test and validate automation and best practice insertion opportunities.

Lead development of Network SOPs and TTPs and drive continuous service improvements. Perform system performance tuning and enhancements and create and maintain Engineering Implementation Plans. Plan and execute network upgrades and maintenance with operations and release management stakeholders. Provide Tier III escalation support and coordinate vendor engagement for incident management. Participate in root cause analysis for problem management activities. Experience Requirements 8 to 12 years of relevant network engineering experience. Equivalent work experience may substitute for a degree.

Active associate-level network vendor certification from Cisco, Juniper, Palo Alto, or F5 Networks. Ability to support off-hours work as mission requirements dictate and participate in on-call rotation. Tier III network operations expertise supporting NOC watch staff. Hands-on maintenance and configuration experience with firewalls, VPNs, and DMZ appliances. Extensive experience with routing, switching, MPLS, VPNs, routing protocols such as BGP, OSPF, IS-IS, and switching protocols such as Spanning Tree, VLANs, LLDP, and VoIP, as well as multicast and emerging network technologies.

Strong understanding of IP addressing and subnetting. Knowledge of defense-in-depth, modern network architectures and topologies, network appliance integrity, and common network security elements. Experience with Ansible, Python, and infrastructure-as-code network automation. Education B.S. degree in a related field or equivalent work experience.