{"id":4327065,"url":"https://alion.io/job/leidos-network-defense-design-engineer-senior","title":"Network Defense Design Engineer Senior","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":339,"ghost_share":0.006,"stale_share":0.912,"repost_share":0.012,"time_to_fill_p50_days":27,"computed_at":"2026-11-14T05:58:10Z"}},"role":"Networking","role_family":"Networking","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Quantico, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":107900,"max":195050,"currency":"USD","period":"year","gross":null,"usd_annual":195050},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"LDAP","optional":false},{"name":"PKI","optional":false},{"name":"Service Desk","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-13T00:00:00Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-15T01:46:27Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Leidos is looking to hire a Network Defense Design Engineer Senior in Quantico, VA to join our SMIT program. The qualified candidate will assist the Government Lead with daily network defense engineering activities, including the design, implementation, integration, administration, maintenance, and optimization of enterprise cybersecurity systems and infrastructure. The Network Defense Design Engineer Senior will also engineer and integrate cybersecurity architectures, security controls, and defensive mechanisms into enterprise information systems to meet Department of Defense (DoD), Navy, and Marine Corps security requirements.\nThe Leidos team delivers the core backbone of the Service, Management, Integration and Transport (SMIT) program, including cybersecurity services, network operations, service desk, and data transport. Leidos will support network modernization efforts to provide Sailors, Marines, and the civilian workforce with the tools they need to be more efficient at increasing naval capabilities and further empowering the Navy Marine Corps team to compete and win.\nPrimary responsibilities include, but are not limited to:\nDesign, develop, and implement enterprise network defense solutions to ensure availability, integrity, authentication, confidentiality, and non-repudiation of information systems and network resources.\nDesign, implement, and maintain enterprise Security Information and Event Management (SIEM) solutions supporting centralized logging, security event correlation, incident detection, investigation, and reporting.\nDesign and integrate enterprise logging, network forensics, intrusion detection, and intrusion prevention capabilities to strengthen cybersecurity monitoring and incident response operations.\nDesign and implement the Enterprise Services portion of the Cybersecurity Sensor Grid, integrating intrusion, incident, and audit data from multiple security technologies, including content monitoring, content filtering, Host-Based Security System (HBSS), and network security sensors.\nEngineer and integrate hardware-based security sensors into Navy and Marine Corps enterprise architectures to support current and emerging Computer Network Defense (CND) technologies.\nDesign and implement security monitoring solutions supporting packet capture, deep packet inspection, customized intrusion detection signatures, and advanced network traffic analysis.\nDesign, configure, and integrate CND mechanisms, including anti-spam technologies, Network Access Control (NAC), HBSS, intrusion prevention systems, and host-based device control modules across enterprise environments.\nEngineer and integrate intrusion prevention and security event monitoring solutions utilizing McAfee Intrusion Prevention System (IPS), McAfee SIEM, and other Government-approved cybersecurity technologies.\nDesign, implement, and maintain Network Access Control (NAC) solutions to enforce device authentication, endpoint compliance, access authorization, and enterprise network security policies.\nIntegrate vulnerability assessment and network scanning technologies, including Assured Compliance Assessment System (ACAS), to identify vulnerabilities, assess security compliance, and support remediation activities.\nDesign, plan, and implement enterprise cybersecurity measures in accordance with established Cyber Readiness Conditions (CYBERCON) and Government-directed defensive requirements.\nDevelop, implement, and maintain cybersecurity policies, technical security plans, procedures, and configuration standards to ensure enterprise systems comply with Government security requirements.\nAssist with the development and integration of Identity and Access Management (IAM) requirements, including role-based access controls, privileged account management, and enterprise authentication services.\nDesign and integrate Public Key Infrastructure (PKI), certificate-based authentication, and two-factor authentication solutions for Active Directory (AD) domain accounts, network devices, and enterprise applications to reduce reliance on password-based authentication.\nDesign, configure, and integrate Microsoft Active Directory (AD) and Lightweight Directory Access Protocol (LDAP) services to support secure authentication and authorization for enterprise network devices, appliances, and applications.\nMonitor, troubleshoot, and optimize directory services replication, authentication services, and supporting infrastructure to maintain system availability and performance.\nOversee Rights Management Services for administrators, users, and groups to ensure appropriate access permissions and compliance with Government security policies.\nDesign and integrate cybersecurity solutions supporting application networking ports, protocols, Information Assurance (IA) requirements, routing, and Local Area Network (LAN) connectivity.\nDevelop, maintain, and execute Continuity of Operations (COOP) and Disaster Recovery (DR) plans, including system backups, restoration procedures, and operational recovery requirements.\nSupport information system security assessments, certification and authorization activities, and compliance validation to ensure enterprise systems meet applicable cybersecurity standards.\nDevelop and manage Plans of Action and Milestones (POA&Ms) to document security deficiencies, track corrective actions, and support system compliance and risk management objectives.\nPerform cybersecurity architecture assessments, configuration reviews, integration testing, verification, and validation to ensure network defense solutions meet technical, operational, and security requirements.\nEnsure network defense designs and implementations support Navy, Marine Corps, Defense Information Systems Agency (DISA), and Joint interoperability requirements.\nPlan, coordinate, and execute cybersecurity system upgrades, migrations, integrations, and infrastructure modernization activities while minimizing operational disruptions.\nDevelop and maintain technical documentation, security architecture diagrams, implementation plans, configuration baselines, standard operating procedures (SOPs), and engineering recommendations.\nProvide senior-level technical expertise and recommendations to Government stakeholders and engineering teams regarding network defense architecture, security integration, vulnerability management, and enterprise cybersecurity improvements.\nBasic Qualifications:\nBachelor’s degree in computer science, Management Information Systems (MIS), Business, Cybersecurity, Information Technology, or a related field.\nMinimum of 10 years of relevant experience in network defense engineering, cybersecurity architecture, information assurance, security systems integration, or enterprise cybersecurity operations.\nUS Citizen with an active DoD Secret security clearance.\nMust possess an Information Assurance Technician (IAT) Level III certification in accordance with applicable DoD requirements.\nMust possess an Information Technology Infrastructure Library (ITIL) Version 3 Foundation certification.\nExtensive experience designing, implementing, integrating, and maintaining enterprise network defense architectures and cybersecurity technologies.\nHands-on experience with Security Information and Event Management (SIEM) solutions, including McAfee SIEM or comparable enterprise security monitoring platforms.\nExperience with intrusion detection and prevention technologies, including McAfee IPS, host-based security solutions, and network security sensors.\nExperience designing and integrating Network Access Control (NAC) solutions, endpoint security technologies, and enterprise access enforcement mechanisms.\nExperience utilizing Assured Compliance Assessment System (ACAS) or comparable vulnerability assessment and network scanning technologies.\nAbility to develop technical documentation, evaluate network defense architecture alternatives, and communicate engineering recommendations to technical teams and Government stakeholders.\nPreferred Qualifications:\nAdvanced cybersecurity certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or equivalent.\nExperience supporting the Marine Corps Enterprise Network (MCEN), Navy Marine Corps Intranet (NMCI), or comparable Department of Defense enterprise networks.\nExperience designing and integrating enterprise security monitoring architectures, including centralized logging, SIEM, network sensors, and security event correlation platforms.\nExperience with McAfee IPS, McAfee SIEM, HBSS, and other DoD-approved endpoint and network defense technologies.\nExperience integrating Network Access Control (NAC), vulnerability assessment, and endpoint compliance solutions into large-scale enterprise networks.\nFamiliarity with DoD cybersecurity policies, Risk Management Framework (RMF), Security Technical Implementation Guides (STIGs), and network security compliance requirements.\nExperience with Navy/Marine Corps, DISA, and Joint network interoperability requirements.\nExperience supporting cybersecurity readiness activities, enterprise defensive measures, and Government-directed security posture changes.\nExperience designing and implementing PKI, certificate-based authentication, Active Directory security, and enterprise Identity and Access Management (IAM) solutions.\nExperience supporting network defense modernization, enterprise cybersecurity migrations, and large-scale security infrastructure integration projects.\nExperience developing security architecture documentation, engineering implementation plans, technical assessments, and cybersecurity remediation strategies.\nStrong understanding of Computer Network Defense (CND) principles, including intrusion detection, security event correlation, packet inspection, network monitoring, and incident response.\nExperience integrating Host-Based Security System (HBSS), device control modules, content filtering, and other enterprise cybersecurity technologies.\nExperience with Microsoft Active Directory (AD), Lightweight Directory Access Protocol (LDAP), directory services replication, and enterprise identity management.\nExperience implementing Public Key Infrastructure (PKI), certificate-based authentication, and multifactor authentication solutions within enterprise environments.\nStrong understanding of network protocols, routing, LAN technologies, application ports, and network security controls.\nExperience developing and implementing Continuity of Operations (COOP), Disaster Recovery (DR), backup, and system recovery solutions.\nExperience supporting DoD cybersecurity compliance activities, including security assessments, vulnerability remediation, and Plans of Action and Milestones (POA&Ms).\nNGEN\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nNovember 13, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $107,900.00 - $195,050.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":11846,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Information Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-11-15T01:46:27Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-11-14T07:33:33+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":27,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-15T03:54:37Z"},"pay":{"stated_usd_annual":195050,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-network-defense-design-engineer-senior","json_url":"https://alion.io/job/leidos-network-defense-design-engineer-senior.json","meta":{"generated_at":"2026-11-15T03:54:37Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7345,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-network-defense-design-engineer-senior"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-network-defense-design-engineer-senior"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-network-defense-design-engineer-senior"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-network-defense-design-engineer-senior\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-network-defense-design-engineer-senior"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4327065}},{"tool":"search_jobs","arguments":{"company":"leidos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4327065},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}