Senior RONIN Network Security Engineer

Leidos is an industry and technology leader serving government and commercial customers. They have an immediate need for a Senior RONIN Network Security Engineer to support the Army’s global wide area network and security infrastructure, ensuring mission continuity and assured communications across all Army network domains.

Responsibilities:

• Engineer, operate, and maintain secure RONIN network security solutions within the AGUN enterprise, ensuring mission assurance and network resilience across distributed Army environments
• Partner with AGUN stakeholders and technical teams to integrate RONIN capabilities into existing and emerging network architectures to enhance operational continuity
• Analyze and optimize complex firewall and segmentation policies supporting secure, dynamic node-to-node interconnectivity under contested or degraded conditions
• Support implementation of Zero Trust Network Access (ZTNA) frameworks and adaptive routing technologies that enhance RONIN node performance and survivability
• Lead troubleshooting and mitigation of high-impact network and security events affecting RONIN operations, coordinating with the AGUN Cybersecurity Service Provider (CSSP)
• Integrate resilient network design, load balancing, and recovery mechanisms into operational processes and capacity planning
• Conduct network anomaly detection, security forensics, and performance monitoring to ensure optimal RONIN node integrity and operational readiness
• Ensure compliance with DoD STIGs, Army cybersecurity policy, and other applicable directives for secure network operations
• Develop and maintain technical documentation, topology diagrams, and configuration baselines using collaborative platforms and version-controlled repositories

Requirements:

• Must currently possess and be able to maintain an active DoD SECRET security clearance
• Bachelor's degree with 12+ years of experience, or Master's degree with 10+ years of experience (additional directly applicable experience may substitute for degree)
• Active DoD IAT Level II (e.g., Security+) certification or equivalent prior to start
• Expert understanding of network security, segmentation, and virtualization technologies, including VSYS and multi-tenant environments
• Demonstrated experience with LAN, WAN, BGP, TCP/UDP, IPSec, VPN, L2/L3 routing, and firewall operations within hybrid or virtualized infrastructures
• Experience with one or more enterprise management platforms such as Palo Alto Panorama, Cisco ISE, Tenable Security Center, VMWARE vSphere, Redhat Openshift, Cisco Prime, Cisco DNA, or Junos Space
• Proven ability to apply DoD STIGs and system hardening standards to enterprise network environments
• Experience with two or more of the following vendor technologies: Cisco, Juniper, Palo Alto, Dell, RAVPN, GlobalProtect, or AppGate
• Working knowledge of SFTP, SSH, SCP, MPLS, SNMP, and NTP
• Ability to work collaboratively in a high-tempo, mission-driven environment, executing complex troubleshooting and resolution efforts
• Strong written and verbal communication skills
• Willingness to work non-standard shifts to support mission operations
• Ability to travel up to 10%
• Experience supporting Army or DISA network modernization/migration programs
• Hands-on experience with Palo Alto Next-Generation Firewalls (NGFW) and advanced rule-base design
• Familiarity with NetSecOps tools such as Git, GitLab CI/CD, Ansible, Terraform, and Puppet
• Scripting experience in Python for automation and configuration management
• Expertise in resilient and distributed enterprise network architecture design
• Comprehensive understanding of U.S. Army network security and compliance standards