Job description

The Defense Sector at Leidos is seeking a cleared Wide Area Network (WAN) Engineer (2nd Shift) to engineer, operate, and sustain long-haul transport and routing infrastructure across Department of Defense (DoD/DoW) networks. This individual assists in routing troubleshooting for the enterprise WAN – working the watch floor to resolve issues with the Enterprise WAN and is accountable for the availability, performance, and STIG compliance of circuits supporting operational mission traffic worldwide.  This position requires daily on-site work at Langley, AFB. The core hours for this position are considered 4:00 PM to 12:00 AM. Roles and Responsibilities: Maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.  Execute circuit installations, migrations, bandwidth upgrades, and site cutovers with documented rollback plans and minimal mission impact.  Develop and maintain routing policy standards, IP address and ASN allocation plans, and authoritative network documentation including logical and physical topology diagrams.  Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.  Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule and validate maintenance actions and outage restoration.  Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.  Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.  Required Qualifications: Clearance: US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date. Education: Bachelor’s degree with 4 years of experience or a Master’s degree with 2 years of experience. Additional experience may be considered in lieu of a degree. Certifications: DoD 8570/8140 IAT Level II certification (Security CE or equivalent) plus an active CCNP Enterprise, JNCIP-SP, or equivalent routing certification preferred. Experience: 4 years of hands-on enterprise WAN engineering and operations experience, with demonstrated ownership of multi-site routed transport in a DoD environment. BGP Expertise: Configuration and troubleshooting of eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs. Ability to tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending. Experience establishing and sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers. Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation. Routing & Transport: Proficiency with OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations. Platforms: Hands-on administration of Cisco (IOS-XE/IOS-XR/NX-OS) and Juniper (Junos) routing platforms in an operational production network. Encryption & Circuits: Experience with Type 1 inline network encryptors (TACLANE/KG-175, HAIPE) and with DISA circuit lifecycle actions (TSR/TSO, DISA Direct/SNAP). Compliance: Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes. Troubleshooting: Demonstrated packet-level analysis skill using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments. Shift Flexibility: Willingness to work evening and rotational shifts (e.g., 3:00 PM-11:00 PM), including weekends and holidays occasional CONUS/OCONUS travel may be required. Preferred Qualifications: Advanced Certification:  CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III (CASP or CISSP).  Segment Routing & MPLS-TE:  Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.  SD-WAN:  Hands-on experience with Cisco SD-WAN or Juniper SDWAN or comparable overlay transport in a DoD/DoW deployment.  Automation:  Proficiency with Python, Ansible, for configuration deployment, compliance auditing, and network state validation.  DoD Enterprise Services:  Familiarity with JRSS, DODIN operations, and DoD boundary/CDS architectures.  Optical Transport:  Working knowledge of DWDM, SONET/SDH, and carrier Ethernet handoffs supporting long-haul circuits.  DABAOPP1 If you re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We re not hiring followers. We re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We re already at step 30 — and moving faster than anyone else dares. Original Posting: September 10, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $73,450.00 - $132,775.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Requirements

Must-haves

This position requires daily on-site work at Langley, AFB. The core hours for this position are considered 4:00 PM to 12:00 AM.
Maintain BGP routing architecture across the enterprise WAN, including peering relationships, autonomous system boundaries, and route policy enforcement.
Execute circuit installations, migrations, bandwidth upgrades, and site cutovers with documented rollback plans and minimal mission impact.
Develop and maintain routing policy standards, IP address and ASN allocation plans, and authoritative network documentation including logical and physical topology diagrams.
Apply DISA STIGs to routing and transport devices, remediate IAVA findings, and support RMF assessment and authorization artifacts and POA&M closure.
Coordinate with DISA, NOC/SOC teams, transport providers, and site network personnel to schedule and validate maintenance actions and outage restoration.
Monitor WAN health and capacity using SolarWinds, NetFlow, and SNMP-based tooling; produce trend analysis and capacity recommendations for government leadership.
Manage Type 1 encryptor configuration and key management coordination in support of secure enclave connectivity.
Clearance: US Citizen with at least an active Top Secret clearance and the ability to obtain a SCI prior to your start date.
Education: Bachelor’s degree with 4 years of experience or a Master’s degree with 2 years of experience. Additional experience may be considered in lieu of a degree.
Experience: 4 years of hands-on enterprise WAN engineering and operations experience, with demonstrated ownership of multi-site routed transport in a DoD environment.
BGP Expertise: Configuration and troubleshooting of eBGP and iBGP, including route reflectors, confederations, and full-mesh peering designs.
Ability to tune BGP routing policy using route maps, prefix lists, AS-path filters, communities, local preference, MED, and AS-path prepending.
Experience establishing and sustaining BGP peering with DISA/DISN service delivery nodes and commercial transport providers.
Working knowledge of BGP convergence tuning, dampening, BFD, and route leak/hijack mitigation.
Routing & Transport: Proficiency with OSPF, EIGRP, MPLS L2/L3 VPNs, VRFs, QoS policy for voice and mission traffic, and IPv4/IPv6 dual-stack operations.
Platforms: Hands-on administration of Cisco (IOS-XE/IOS-XR/NX-OS) and Juniper (Junos) routing platforms in an operational production network.
Encryption & Circuits: Experience with Type 1 inline network encryptors (TACLANE/KG-175, HAIPE) and with DISA circuit lifecycle actions (TSR/TSO, DISA Direct/SNAP).
Compliance: Working knowledge of DISA STIGs, RMF, IAVA remediation, and change control under DoD configuration management processes.
Troubleshooting: Demonstrated packet-level analysis skill using Wireshark/tcpdump, SPAN/TAP captures, and NetFlow to isolate faults across provider and government segments.
Shift Flexibility: Willingness to work evening and rotational shifts (e.g., 3:00 PM-11:00 PM), including weekends and holidays occasional CONUS/OCONUS travel may be required.
Advanced Certification:  CCIE Enterprise Infrastructure or Service Provider, JNCIE-SP, or DoD 8570/8140 IAT Level III (CASP or CISSP).
Segment Routing & MPLS-TE:  Experience with segment routing, MPLS traffic engineering, or EVPN in a large-scale transport core.

Nice-to-haves

Certifications: DoD 8570/8140 IAT Level II certification (Security CE or equivalent) plus an active CCNP Enterprise, JNCIP-SP, or equivalent routing certification preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Pto