Mid-Level OT/IT Network Engineer (Transportation)

Location

This role is full‑time at the customer site in McLean, VA. Candidates must have been continuously located in the United States for the past three years, be eligible for a Public Trust Clearance, and possess a valid driver’s license.

Why This Role Matters

The Mid‑Level OT/IT Network Engineer is the hands‑on owner of STOL’s network and connected‑vehicle testbed infrastructure—designing, administering, securing, documenting, and troubleshooting the networks that connect lab systems, field sites, roadside infrastructure, edge platforms, and connected‑vehicle devices. The engineer also maintains the network’s federal security authorization posture, handling security documentation, Authorization to Operate (ATO) and Risk Management Framework (RMF) artifacts, Plans of Action and Milestones (POA&Ms), and vulnerability remediation in partnership with the program’s cybersecurity and Corporate Information Security (CIS) team.

Role Emphasis

Time allocation is expected to be approximately:

• OT/IT network engineering, administration, and testbed infrastructure – ~60%
• Network security, ATO/RMF documentation, and vulnerability remediation – ~20%
• Connected‑vehicle (V2X) testbed operations and experiment support – ~20%

What You’ll Do

Network Engineering & Administration

• Design, configure, administer, and troubleshoot switches, routers, firewalls, wireless infrastructure, VPNs, and remote‑site connectivity.
• Manage Layer 2/Layer 3 networking, including VLANs, routing, subnetting, ACLs, NAT, segmentation, and IP addressing.
• Administer supporting services such as DNS, DHCP, NTP, PTP/IEEE 1588, GPS timing, and remote connectivity.
• Monitor network health, availability, latency, and performance; troubleshoot with Wireshark/tcpdump, SNMP, syslog, and packet captures.
• Maintain configurations, backups, firmware, certificates, device inventories, IP plans, port maps, and network diagrams.
• Install and troubleshoot fiber/copper infrastructure and support connectivity to field‑deployed RSUs, edge nodes, traffic systems, and remote sites.
• Plan and execute network changes, upgrades, and equipment replacements using established change‑control practices.

Connected‑Vehicle Testbed Operations

• Operate and maintain STOL’s Smart Garage and connected‑vehicle testbeds, including RSUs, OBUs, signal controllers, edge platforms, and network‑connected research equipment.
• Configure and troubleshoot C‑V2X PC5/Uu, 5G NR, Wi‑Fi, Ethernet, fiber, and cellular/backhaul connectivity.
• Translate research requirements into network and testbed configurations and keep environments in known, repeatable states.
• Support laboratory experiments, field testing, demonstrations, and troubleshooting across network, device, timing, protocol, and application layers.

Network Security, ATO & Vulnerability Management

• Maintain the security posture and documentation for the network’s ATO and ongoing RMF activities.
• Develop and keep current security/network architecture diagrams, data‑flow diagrams, inventories, and other authorization artifacts.
• Develop, maintain, and track network‑related POA&Ms, coordinating remediation and evidence collection for closure.
• Review vulnerability findings affecting OS, network, and edge infrastructure; implement or coordinate remediation via patches, firmware upgrades, configuration changes, or compensating controls.
• Implement network security controls including segmentation, firewall/ACL policies, VPNs, secure administrative access, and IT/OT boundary protections.
• Partner with cybersecurity, ISSO/ISSM, and program personnel on assessments, continuous monitoring, and applicable NIST SP 800‑53/800‑82 requirements.

Operational Support & Safety Compliance

• Support testing on concurrent R&D projects, laboratory demonstrations, field deployments, and high‑visibility stakeholder events.
• Apply appropriate safety practices when working with network equipment, RF systems, vehicles, cabling, and roadside infrastructure.
• Uphold the lab’s safety posture across routine operations, testing, and special events; partner with facilities on power, environmental controls, and cable management.

Required Qualifications

• Bachelor’s degree in network engineering, IT, Electrical/Computer Engineering, Computer Science, or a related technical field with 4‑8 years of relevant experience — or an associate’s degree with 7+ years; equivalent experience may be considered.
• 4+ years of hands‑on OT/IT networking experience designing, configuring, administering, and troubleshooting industrial, laboratory/testbed, or field‑deployed networks.
• Strong knowledge of TCP/IP, switching, routing, VLANs, subnetting, ACLs, NAT, VPNs, firewalls, and network segmentation.
• Familiarity with fiber/copper infrastructure, network diagrams, IP addressing, DNS/DHCP, and time‑synchronization technologies (NTP, PTP/IEEE 1588, GPS).
• Comfort administering Linux‑based devices and using Linux for troubleshooting and basic scripting.
• Working knowledge of network security, vulnerability remediation, and secure network architecture.
• Familiarity with federal ATO/RMF processes, NIST SP 800‑53/800‑82, security plans, POA&Ms, and maintaining technical authorization documentation.
• Strong written and verbal communication skills with the ability to maintain clear, accurate technical documentation.
• Excellent organization skills to manage competing operational, security, and research priorities.
• Ability to perform hands‑on work in laboratory, garage, vehicle, and field environments, including lifting up to 50 lb; occasional off‑hours support may be required.

Preferred Qualifications

• CCNA, CCNP, or equivalent networking certification.
• Security+ or equivalent cybersecurity knowledge.
• Experience with Cisco, Juniper, Aruba, Fortinet, Palo Alto, or similar networking platforms.
• Experience with C‑V2X PC5/Uu, 5G NR, SAE J2735/J3161, or other connected‑vehicle technologies.
• Hands‑on experience with Roadside Units (RSU) and Onboard Units (OBU) from vendors such as Yunex, Cohda Wireless, Commsignia, Kapsch, Ettifos, etc.
• Familiarity with PKI/SCMS credentialing and OT/ICS security concepts.
• Experience supporting federally funded R&D, government laboratories, or government contracting.

Compensation & Benefits

Salary range: $110,000 – $130,000 per year (commensurate with experience). Eligible for Leidos’ comprehensive benefits package, including health, dental, and vision insurance, a retirement plan, and paid time off.