Principal Network Access Control (NAC) Engineer

Leidos

Confirmed live today High trust

Quick summary

Work type: On-site
Location: Odenton, MD
Salary: $116,350–$210,325 / yr
Employment: Full-time
Posted: 2 days ago
Freshness: Confirmed live today
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $184k

This role $163k

$102k $246k

below market most similar roles pay here above market

This role pays less than 61% of similar roles. Most pay $149,612–$218,656 — the blue band above. At the midpoint, this role pays about $163k versus about $184k for comparable roles.

Based on 240 similar postings.

Employer

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.

Leidos currently has 377 open roles on FindRole.

Listed pay typically runs $92,300–$166,850 across 316 roles with salary data.

Most-posted roles

View all roles at Leidos

At a glance

TL;DR · Principal Network Access Control (NAC) Engineer

Role Posting Log in to save

The Principal Network Access Control (NAC) Engineer joins the network engineering team to modernize a large-scale, geographically distributed wireless network environment. This role involves designing and implementing the migration of Aruba wireless controllers to a centralized cloud-hosted infrastructure using Aruba Central. Key responsibilities include developing migration strategies, establishing wireless deployment standards, and improving network resiliency through Layer 2 and Layer 3 redundancy, including VRRP and virtual IP addressing. The engineer will implement enterprise security standards such as WPA3, 802.1X, RADIUS, and EAP-TLS, while integrating with Cisco ISE, Aruba ClearPass, and Microsoft Entra ID. Technical skills required include proficiency with Aruba wireless technologies, ScienceLogic SL1 monitoring, and network automation tools like Python and Ansible to ensure secure, scalable, and reliable wireless connectivity.

Skills

Aruba Aruba Central Cisco ISE Aruba ClearPass Microsoft Entra ID Python Ansible REST APIs WPA3 802.1X RADIUS EAP-TLS ScienceLogic SL1 VRRP GRE DNS DHCP NTP VPN WIDS PKI Active Directory Layer 2 Layer 3 Routing Switching

What you'll do

Design and implement the migration of Aruba wireless controllers to a centralized cloud-hosted infrastructure.
Deploy and configure Aruba Central for centralized management, configuration standardization, and operational visibility.
Design and implement Layer 2 and Layer 3 redundancy to improve wireless availability and service continuity.
Configure enterprise wireless security standards including WPA3, WIDS, and identity-based access controls.
Integrate wireless infrastructure with Cisco ISE, Aruba ClearPass, and enterprise identity services like Microsoft Entra ID.
Integrate Aruba Central with ScienceLogic SL1 to establish monitoring policies, APIs, and operational dashboards.
Develop standardized engineering documentation including architecture diagrams, migration playbooks, and test plans.
Provide technical direction and mentoring to other engineering personnel on Aruba wireless infrastructure.

What we're looking for

U.S. citizenship is required.
Active Secret clearance is required.
Bachelor's degree with 12+ years of relevant experience, or Master's degree with 10+ years of relevant experience.
Significant hands-on experience engineering, implementing, and supporting enterprise Aruba wireless infrastructure, including controllers and access points.
Experience with Aruba Central for configuration management, controller integration, and enterprise wireless deployments.
Strong knowledge of 802.11 standards, RF fundamentals, WLAN architecture, VLANs, routing, and switching.
Experience implementing and troubleshooting wireless controller redundancy, high availability, failover, and network resiliency.
Experience with wireless security and authentication, including WPA2/WPA3, 802.1X, RADIUS, and enterprise NAC platforms.

Similar roles

Principal Network Security Engineer

Leidos

Odenton, MD 2 days ago $116,350–$210,325

Network Security Architecture Next-Generation Firewalls VPN TLS Network Access Control DNS Security zero-trust Micro-segmentation IPsec TCP/IP Routing Protocols VLANs NAT QoS Palo Alto Cisco Aruba Dell Infoblox Brocade NIST FedRAMP FISMA RMF DISA STIGs Python Ansible REST APIs PKI SIEM SOAR Visio PowerPoint Cameo Jira Confluence

10+ yrs exp

Save

Network Administration and Operations Engineer

Leidos

Anniston, AL 44 days ago

TCP/IP Routing Switching Firewalls VLAN VPN DNS DHCP Network Segmentation Risk Management Framework (RMF) ACAS Cisco CCNA Juniper JNCIS Palo Alto PCNSA CompTIA Network+ Network Architecture Configuration Management

2+ yrs exp

Save

Principal Network Engineer

Leidos

Columbia, MD 100 days ago $139,100–$251,450

Network Engineering LAN CAN WAN Telecommunications Firewall Load Balancing Traffic Shaping VoIP GRE IPSec IP Encryption MoIP NAT ISO 9000 DoD 8570.01-M SIGINT Cryptographic Key Management

10+ yrs exp

Save

Principal Network Engineer, Wireless

Leidos

Odenton, MD 2 days ago $116,350–$210,325

Aruba AOS 10 Aruba Central Aruba ClearPass Cisco ISE 802.1X RADIUS WPA3 Wi-Fi 6 RF Engineering EAP-TLS TCP/IP VLANs DNS DHCP Firewalls Python Ansible SNMPv3 REST APIs Ekahau AirMagnet WIDS WIPS STIGs RMF

10+ yrs exp

Save

Senior Wireless Network Engineer

PNC

Pittsburgh, PA +6 36 days ago

Aruba Aruba ClearPass Aruba Central 802.11 802.1X TACACS RADIUS RF Design Network as Code Infrastructure as Code Agile Python REST APIs NetOps Wireless LAN NAC Switching Routing

8+ yrs exp

Save

Principal Network Engineer, Routing & Switching

Leidos

Odenton, MD 2 days ago $116,350–$210,325

BGP OSPF EIGRP TCP/IP VLAN Spanning Tree VRF MPLS QoS SD-WAN SD-Access Python Ansible REST APIs Cisco Aruba Palo Alto Dell Infoblox Brocade Visio Jira Confluence IPv6 Network Automation Software-Defined Networking VPN Firewalls NAT Multicast

10+ yrs exp

Save