Location: This role will be expected to work full-time at the customer site in McLean, VA

Candidate MUST:

• Be currently located in the United States for the current three consecutive years and be eligible for a Public Trust Clearance.
• Possess a valid driver's license

The Mid-Level OT/IT Network Engineer is a hands-on owner of STOL's network and connected-vehicle testbed infrastructure — designing, administering, securing, documenting, and troubleshooting the networks connecting lab systems, field sites, roadside infrastructure, edge platforms, and connected-vehicle devices. You'll also carry meaningful responsibility for the network's federal security authorization posture — security documentation, Authorization to Operate (ATO) and Risk Management Framework (RMF) artifacts, Plans of Action and Milestones (POA&Ms), and vulnerability remediation — in partnership with the program's cybersecurity and Corporate Information Security (CIS) team.

You'll sit within the lab's Operations team and work across a matrix organization, partnering with researchers and project engineers to support testing campaigns and demonstrations.

Role Emphasis: This is primarily a network engineering and administration role. As a general guide to how time is expected to break down:

• OT/IT network engineering, administration, and testbed infrastructure (~60%)
• Network security, ATO/RMF documentation, and vulnerability remediation (~20%)
• Connected-vehicle (V2X) testbed operations and experiment support (~20%)

Strong hands-on networking is the foundation for this role. Working knowledge of federal ATO/RMF processes is valued; deep V2X/connected-vehicle experience is not required going in and can be grown into.

Why you'll want it: hands-on ownership of a one-of-a-kind connected-vehicle research testbed, direct contribution to USDOT/FHWA national transportation initiatives, and a clear growth path from core networking into V2X and federal security authorization work.

Network Engineering & Administration

• Design, configure, administer, and troubleshoot switches, routers, firewalls, wireless infrastructure, VPNs, and remote-site connectivity.
• Manage Layer 2/Layer 3 networking, including VLANs, routing, subnetting, ACLs, NAT, segmentation, and IP addressing.
• Administer supporting network services, including DNS, DHCP, NTP, PTP/IEEE 1588, GPS timing, and remote connectivity.
• Monitor network health, availability, latency, and performance; troubleshoot using Wireshark/tcpdump, SNMP, syslog, and packet captures.
• Maintain network configurations, backups, firmware, certificates, device inventories, IP plans, port maps, and network diagrams.
• Install and troubleshoot fiber/copper infrastructure and support connectivity to field-deployed RSUs, edge nodes, traffic systems, and remote sites.
• Plan and execute network changes, upgrades, and equipment replacements using established change-control practices.

Connected-Vehicle Testbed Operations

• Operate and maintain STOL's Smart Garage and connected-vehicle testbeds, including RSUs, OBUs, signal controllers, edge platforms, and network-connected research equipment.
• Configure and troubleshoot C-V2X PC5/Uu, 5G NR, Wi-Fi, Ethernet, fiber, and cellular/backhaul connectivity.
• Translate research requirements into network and testbed configurations and maintain environments in known, repeatable states.
• Support laboratory experiments, field testing, demonstrations, and troubleshooting across network, device, timing, protocol, and application layers.

Network Security, ATO & Vulnerability Management

• Maintain the security posture and documentation for the network's ATO and ongoing RMF activities.
• Develop and keep current security/network architecture and boundary diagrams, data-flow diagrams, inventories, and other authorization artifacts.
• Develop, maintain, and track network-related Plans of Action and Milestones (POA&Ms), coordinating remediation and evidence collection for closure.
• Review vulnerability findings affecting OS, network and edge infrastructure; implement or coordinate remediation through patches, firmware upgrades, configuration changes, or compensating controls.
• Implement network security controls including segmentation, firewall/ACL policies, VPNs, secure administrative access, and IT/OT boundary protections.
• Partner with cybersecurity, ISSO/ISSM, and program personnel on assessments, continuous monitoring, and applicable NIST SP 800-53/800-82 requirements.

Operational Support & Safety Compliance

• Support testing on concurrent R&D projects, laboratory demonstrations, field deployments, and high-visibility stakeholder events.
• Apply appropriate safety practices when working with network equipment, RF systems, vehicles, cabling, and roadside infrastructure.
• Uphold the lab's safety posture across routine operations, testing, and special events, and partner with facilities on power, environmental controls, and cable management.

We encourage candidates who meet most — but not necessarily all — of these to apply. Strong hands-on networking is the foundation for this role.

Education

• Bachelor’s degree in network engineering, Information Technology, Electrical/Computer Engineering, Computer Science, or a related technical field with 4–8 years of relevant experience — OR a technical associate's degree with 7+ years. Equivalent demonstrated experience may be considered in lieu of a degree.

OT/IT Networking Experience (Primary)

• 4+ years of hands-on experience designing, configuring, administering, and troubleshooting OT, industrial, laboratory/testbed, or field-deployed networks.
• Strong knowledge of TCP/IP, switching, routing, VLANs, subnetting, ACLs, NAT, VPNs, firewalls, and network segmentation.
• Knowledge of fiber/copper infrastructure, network diagrams, IP addressing, DNS/DHCP, and time synchronization technologies (NTP, PTP/IEEE 1588, GPS).
• Comfort administering Linux-based devices and using Linux for troubleshooting and basic scripting.

Network Security & ATO/RMF (Secondary)

• Working knowledge of network security, vulnerability remediation, and secure network architecture.
• Familiarity with federal ATO/RMF processes, NIST SP 800-53/800-82, security plans, POA&Ms, and maintaining technical authorization documentation.

Professional & Work Requirements

• Strong written and verbal communication skills, with the ability to maintain clear, accurate technical documentation.
• Strong organization skills, with the ability to manage competing operational, security, and research priorities.
• Hands-on work in laboratory, garage, vehicle, and field environments, including lifting up to 50 lbs; occasional off-hours support for testing, maintenance, or demonstrations.

• CCNA, CCNP, or equivalent networking experience.
• Security+ or equivalent cybersecurity knowledge.
• Experience with Cisco, Juniper, Aruba, Fortinet, Palo Alto, or similar networking platforms.
• Experience with C-V2X PC5/Uu, 5G NR, SAE J2735/J3161, or connected-vehicle technologies.
• Hands-on experience with Roadside Units (RSU) and Onboard Units (OBUs) from vendors such as Yunex, Cohda Wireless, Commsignia, Kapsch, Ettifos etc.
• Familiarity with PKI/SCMS credentialing and OT/ICS security concepts.
• Experience supporting federally funded R&D, government laboratories, or government contracting.

Salary range: $110,000 – $130,000 per year (commensurate with experience). Eligible for the company's comprehensive benefits, including health, dental, and vision insurance, retirement plan, and paid time off.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.