Skip to content

Open nowPosted today

Principal Network Access Control (NAC) Engineer

Leidos1,016 open roles

Where
Odenton, MD
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowPrincipal Network Access Control (NAC) EngineerLeidos · Odenton, MD
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Leidos's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

8.1% of postings close within 7 days. Measured by our own scanner across the market. Leidos postings stay open a median of 3 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.5%3 days
  3. 8.1%7 days
  4. 15.1%14 days
  5. 33.9%30 days
This job: posted today

Leidos median: 3 days open

The posting

Leidos is seeking a Principal Network Engineer specializing in enterprise wireless infrastructure to design, implement, and modernize a large-scale, geographically distributed wireless network environment.

The successful candidate will serve as a senior technical engineer responsible for migrating Aruba wireless controllers to a centralized cloud-hosted environment, implementing Aruba Central, improving wireless network resiliency, and standardizing wireless security and access-control capabilities.

This position requires extensive experience with Aruba wireless technologies, enterprise networking, wireless security, high availability, and network access control. The engineer will collaborate with cloud, network, cybersecurity, identity management, and monitoring teams to deliver reliable, scalable, and secure wireless infrastructure.

The engineer will support architecture, implementation, integration, testing, migration, documentation, and transition to operations while providing technical direction to other engineering personnel.

Primary Responsibilities

Wireless Architecture and Controller Migration

  • Design, engineer, and implement the migration of existing Aruba wireless controllers to a centralized cloud-hosted infrastructure.
  • Deploy and configure Aruba Central for centralized wireless management, configuration standardization, monitoring, and operational visibility.
  • Develop controller migration strategies, implementation procedures, validation plans, and rollback processes.
  • Standardize NTP configurations across wireless controllers, access points, and supporting network infrastructure.
  • Evaluate and establish wireless deployment standards, including bridge versus tunnel mode and campus versus remote architectures.
  • Develop standardized configurations and deployment playbooks for geographically distributed sites.
  • Coordinate cloud infrastructure integration, including connectivity, routing, security requirements, and availability.

Wireless High Availability and Network Resiliency

  • Design and implement Layer 2 and Layer 3 redundancy to improve wireless availability and service continuity.
  • Configure and validate controller failover, preemption, and recovery to preferred controllers following service restoration.
  • Implement and troubleshoot VRRP, virtual IP addressing, and controller high-availability configurations.
  • Evaluate and optimize DHCP, GRE tunnels, routing, and wireless traffic forwarding across centralized and distributed environments.
  • Develop and execute failover and recovery testing to validate wireless resiliency.
  • Troubleshoot complex controller, routing, and wireless connectivity issues.

Wireless Security and Network Access Control

  • Design and implement enterprise wireless security standards, including WPA3, Wireless Intrusion Detection Systems (WIDS), and identity-based access controls.
  • Configure wireless security policies through Aruba Central and validate deployment to controllers and access points.
  • Evaluate hardware compatibility and develop migration strategies for WPA3 adoption, including transition-mode considerations.
  • Standardize wireless configurations, including 5 GHz operation, authentication, and security settings.
  • Integrate wireless infrastructure with Cisco ISE, Aruba ClearPass, and enterprise identity services.
  • Configure and troubleshoot 802.1X, RADIUS, EAP-TLS, certificate-based authentication, and wireless access policies.
  • Coordinate identity-based policy integration with Microsoft Entra ID, VPN infrastructure, and firewall enforcement.

Monitoring and Enterprise Integration

  • Integrate Aruba Central with ScienceLogic SL1 to support wireless monitoring, alerting, device discovery, and performance visibility.
  • Coordinate with monitoring engineers to establish required APIs, monitoring policies, and operational dashboards.
  • Validate controller status, access point availability, authentication health, and wireless performance monitoring.
  • Support integration with enterprise DNS, DHCP, NTP, routing, and security infrastructure.
  • Identify opportunities to automate wireless configuration, monitoring, and troubleshooting.

Guest Wireless and Security Integration

  • Develop secure guest wireless architecture, including network segmentation and Internet connectivity options.
  • Evaluate guest authentication methods, including temporary credentials, PPSK, and IPSK.
  • Support guest wireless security requirements, implementation planning, and authorization documentation.
  • Coordinate technical security assessments, configuration validation, and required infrastructure approvals.

Technical Leadership and Implementation

  • Serve as a senior technical subject matter expert for Aruba wireless infrastructure and centralized wireless management.
  • Provide technical direction, mentoring, and engineering guidance to network engineering personnel.
  • Lead technical design reviews, implementation planning, integration testing, and troubleshooting activities.
  • Identify technical risks, dependencies, and operational impacts associated with wireless modernization.
  • Establish repeatable engineering standards and implementation procedures for deployment teams.
  • Support production migration, validation, and transition to operations.

Documentation Responsibilities

Develop and maintain engineering and operational documentation, including:

  • Wireless architecture and cloud integration diagrams.
  • Aruba Central and controller configuration standards.
  • Controller migration and implementation procedures.
  • Layer 2/Layer 3 redundancy, VRRP, and failover designs.
  • Wireless security and WPA3 implementation standards.
  • NAC integration and authentication policy documentation.
  • Network connectivity, routing, and data-flow diagrams.
  • ScienceLogic SL1 monitoring integration requirements.
  • Guest wireless architecture and security documentation.
  • Test plans, validation procedures, and rollback documentation.
  • Standard operating procedures and migration playbooks.
  • As-built and operations transition documentation.

Required Qualifications

  • Bachelor's degree with 12+ years of relevant experience, or Master's degree with 10+ years of relevant experience. Additional relevant experience, education, or training may be considered in lieu of a degree.
  • Significant hands-on experience engineering, implementing, and supporting enterprise Aruba wireless infrastructure, including controllers, access points, and centralized management platforms.
  • Experience with Aruba Central, including configuration management, controller integration, and enterprise wireless deployments.
  • Strong knowledge of enterprise wireless networking, including 802.11 standards, RF fundamentals, WLAN architecture, VLANs, routing, and switching.
  • Experience implementing and troubleshooting wireless controller redundancy, high availability, failover, and network resiliency.
  • Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms.
  • Experience integrating wireless infrastructure with enterprise networking services, including DNS, DHCP, NTP, routing, and monitoring platforms.
  • Experience developing and executing engineering designs, implementation plans, migration procedures, test plans, and production deployments.
  • Strong troubleshooting and analytical skills with the ability to resolve complex wireless connectivity, authentication, and network performance issues.
  • Strong written and verbal communication skills, including experience providing technical guidance and developing engineering documentation.

Clearance Requirements

  • U.S. citizenship required.
  • Active Secret clearance required.
  • Must meet applicable cybersecurity workforce qualification requirements for the assigned position.

Preferred Qualifications

  • Experience migrating Aruba wireless controllers to cloud-hosted or centrally managed environments.
  • Experience with Aruba Central On-Premises or cloud-managed Aruba deployments.
  • Experience implementing VRRP, controller preemption, and Layer 2/Layer 3 failover architectures.
  • Experience with bridge-mode, tunnel-mode, campus, and remote wireless architectures.
  • Experience integrating Cisco ISE and Aruba ClearPass with enterprise wireless infrastructure.
  • Experience integrating wireless authentication with Microsoft Entra ID, Active Directory, and PKI.
  • Experience implementing WPA3, WIDS/WIPS, PPSK/IPSK, and wireless security standards.
  • Experience integrating Aruba Central with ScienceLogic SL1 or comparable monitoring platforms.
  • Experience designing secure guest wireless networks with isolated Internet connectivity.
  • Experience with wireless RF optimization, 5 GHz deployments, and high-density environments.
  • Experience with Python, REST APIs, Ansible, or similar network automation technologies.
  • Experience supporting security authorization activities, configuration hardening, and compliance assessments.
  • Experience supporting geographically distributed enterprise networks.

Desired Certifications

Relevant certifications may include:

  • Aruba Certified Mobility Professional (ACMP) or equivalent.
  • Aruba Certified Design Professional (ACDP) or equivalent.
  • Aruba Certified Mobility Expert (ACMX) or equivalent.
  • Cisco CCNP Enterprise.
  • CompTIA Security+.
  • CISSP.

Key Success Factors

The ideal candidate is not simply a wireless controller administrator. This position requires an engineer capable of modernizing enterprise wireless infrastructure, integrating centralized management platforms, improving network resiliency, and implementing secure wireless access across distributed environments.

The successful engineer must understand how wireless controllers, Aruba Central, routing, authentication, cloud infrastructure, and enterprise monitoring work together to deliver reliable wireless connectivity.

The position requires strong technical leadership, advanced troubleshooting capabilities, and the ability to develop standardized implementation procedures that enable successful migrations and long-term operational support.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

October 8, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $116,350.00 - $210,325.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Leidos's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Leidos's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Leidos's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.