Enterprise Network Architect

Description

Job Description:

Leidos Civil Group has an immediate opening for a Network Operations (NetOps) Lead and Chief Engineer to join our Enterprise IT Modernization team in support of the National Centers for Environmental Prediction (NCEP) Central Operations (NCO) Network Infrastructure Services Contract. NCO is an office under the National Weather Service (NWS), National Oceanic and Atmospheric Administration (NOAA), U.S. Department of Commerce.

In this role, you will provide lead engineering support to the NCEP customer on their network infrastructure, including operations and maintenance (O&M) of networking services, equipment, and software. These network support services require operating within a Federal Information Security Modernization Act (FISMA) High Impact System, per Federal Information Processing Standards (FIPS) publication 199. The NCO networks are maintained in accordance with all Federal guidelines related to FISMA domains. You will solve the customer’s most demanding challenges thru innovation, technology modernization, and transformation processes, using proven industry methods and vendor solutions. The NetOps lead will spearhead NCO’s O&M support inclusive of installation, configuration, maintenance, monitoring, optimization, patching, security hardening, troubleshooting, recovery, and decommissioning to the existing network infrastructure equipment and circuits.

The ideal candidate would have strong skills architecting Network Services and Network Defense for federal customers, applying Model Based System Engineering (MBSE), virtual lab testing and simulation, and have a very good understanding of next gen security and or multi-cloud solutions; can work under their own direction towards agreed targets/metrics.

Primary Responsibilities:

• Provide network operations and technical services for the NOAA FISMA High networks used by the NCEP to execute against their functions. 
• Leads and directs others in the areas of enterprise network architecture, enterprise routing design, network systems programming and configuration, enterprise networking security and best practices, network system integration and/or enterprise network management OR the analysis, development, and operational support of highly complex technologies affecting multiple networking infrastructure areas. Performs a variety of tasks.
• Serves as the networking architect for improving and optimizing the current state of the network as well as designing and implementing the future state.
• Able to efficiently troubleshoot extremely complex networking problems to resolution
• Plan and perform maintenance and upgrade of Cisco and Juniper network routers, Gigamon Network Terminal Access Point (TAP), Cisco firewalls, Stealthwatch, remote access systems, and network management systems 
• Provide support for implementing routing and switching protocols
• Interpret customer requirements and develop internal requirements and design solutions for optimal enterprise communication services
• Monitor network availability, meet performance metrics and ensure high quality data transmission using standard network tools (ex: Solarwinds, Cisco Prime)  
• Serve as a liaison with 3rd party vendors and providers and be able to coordinate troubleshooting and provide real time updates via standard collaboration tools
• Create the established network security processes to defend and operate the national NCEP network
• Provide technical expertise to large or complex projects; Help prepare cost estimates for all proposed network and associated infrastructure solutions
• Establish and maintain standard operating procedures for operations team members 
• Identify & remediate potential integration issues; lead solution demo & pilots
• Interact regularly with the Infrastructure, Applications, SIEM/SOAR, ISSO, Vulnerability Assessment teams, and on-site technical resources to ensure both the security and on-going stability of NCEP network. 
• Regularly meet with Government customers for technology, innovation and program status updates.

Basic Qualifications:

• Bachelor’s degree in technical disciplines with 8+ years of experience related to IT and/or systems engineering. Additional years of relevant experience, training, and/or professional certifications will be considered in lieu of a degree.
• Must be a Cisco Certified Internetwork Expert (CCIE) in Routing and Switching
• Must have at least three (3) years hands-on experience managing Cisco Firepower Threat Defense
• Must have hands-on experience with Juniper networks
• Must have knowledge of security best practices in designing and implementing complex networks.
• Must have at least 3 years hands-on experience working with the type of network firewalls, switches, and routers that are deployed across OneNWSNet (historically this has been Juniper or Cisco but is subject to change)
• Shall have a verifiable history of designing and implementing multi-VRF (Virtual Routing and Forwarding) large-scale networks with points of presence in geographically separate data centers.
• Must have network and firewall engineering experience with designing, implementation, and maintaining Layer 2 and 3 networking devices and/or firewall devices such as Cisco, Juniper, Dell, Fortinet, and/or Palo Alto  
• Strong knowledge of the OSI 7-layer model 
• Strong knowledge of TCP/IP and common application layer protocols 
• Well-versed in isolating and performing root-cause analysis to determine infrastructure design improvements and enhancements, software bugs and documenting necessary workarounds.
• Ability to work and brief customers to include senior management 
• Must be able to work collaboratively with other system administrators, system engineers, and network engineers in a team environment 
• Ability and drive to quickly learn new network and IT concepts

Preferred Qualifications:

• Security Certifications (CISSP a plus)
• Other IT certifications (cloud, Microsoft)
• ITIL foundations certification with Enterprise IT experience using ITIL
• Experience having worked successful partnerships with suppliers and vendors.
• Expertise in use of SDN technologies to automate network provisioning and increase redundancy
• Ability to apply MBSE for network design, engineering, virtual lab testing and AoA simulations
• Architect and transition large scale IP services for an enterprise.
• Skill in independently making configuration updates to ensure system availability requirements

• Strong problem-solving and analytical skills and demonstrates poise and ability to act calmly and competently in high-pressure and high-stress situations
• Understanding of accepted security practices, troubleshooting issues, attack vectors and customer support

Clearance / Citizenship:

• US Citizenship is required
• Public Trust required

Work Location:

• While the network support services and equipment are located across the Continental United States and may require some travel, the majority of the work will be conducted at the NCWCP facility in College Park, MD.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is a Fortune 500® technology, engineering, and science solutions and services leader working to solve the world’s toughest challenges in the defense, intelligence, civil, and health markets. The company’s 45,000 employees support vital missions for government and commercial customers. Headquartered in Reston, Virginia, Leidos reported annual revenues of approximately $14.4 billion for the fiscal year ended December 30, 2022.  For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.