Network Observability Engineer

Overview

Engineer, operate, and continuously improve the systems that monitor the health, performance, and availability of the Leidos enterprise network, turning network telemetry into actionable operational intelligence within the CDAO division.

What you'll do

• Collaborate with network operations, engineering teams, and stakeholders to gather requirements and deliver effective network observability solutions.
• Onboard, normalize, and analyze network telemetry (syslog, SNMP, NetFlow, and streaming telemetry) in Splunk and OpenSearch, building searches, dashboards, alerts, and reports that provide situational awareness of network health and performance.
• Deploy and maintain modern network telemetry solutions leveraging OpenConfig and OpenTelemetry standards.
• Design and develop software, scripts, and automation (e.g., Python, PowerShell, Bash) and integrate with REST APIs to collect data, enrich events, and connect monitoring platforms with other enterprise tools.
• Use AI coding assistants such as Claude Code or OpenAI Codex to accelerate development of integrations, automation, and monitoring content, applying sound code review, testing, and version control practices to AI-generated code.
• Integrate monitoring alerts and events with ServiceNow or similar ITSM platforms to support automated incident creation, routing, and closed-loop resolution.
• Apply Machine Learning and AI techniques for predictive analytics, anomaly detection, and event correlation to enhance network performance and reliability.
• Utilize SNMP, NetFlow, and other monitoring techniques to maintain and optimize network performance.
• Document procedures and maintain detailed audit-level records of systems and processes.
• Provide tiered troubleshooting, resolution, and root-cause analysis for complex network monitoring and performance issues.
• Engage with senior management and stakeholders as necessary to communicate technical insights and strategic recommendations.
• Participate in all phases of the systems engineering lifecycle, including requirements analysis, solution design, development, integration, testing, documentation, and implementation.

What you'll need

• Bachelor's degree in Information Technology or related field with 4+ years of relevant industry experience; additional years of experience may be substituted in lieu of a degree.
• Strong understanding of network design, protocols, and performance management, with the ability to interpret device and traffic telemetry.
• Hands-on experience with Splunk and/or OpenSearch, including data onboarding, search languages (SPL, KQL/Lucene), dashboards, and alerting.
• Hands-on experience with SNMP, NetFlow, OpenConfig, and OpenTelemetry.
• Proficiency in programming and scripting (Python preferred), with a track record of building automation and developing and integrating RESTful APIs.
• Hands-on experience using AI-assisted development tools such as Claude Code, OpenAI Codex, or similar to write, test, and maintain code.
• Demonstrated experience integrating Machine Learning techniques within network monitoring and analysis frameworks.
• Strong understanding of Aruba/Silver Peak SD-WAN and related networking technologies.
• Proficiency in SQL and database interfaces, including ODBC.
• Familiarity with ServiceNow or a similar ITSM platform, and with ITIL Incident, Change, and Configuration Management practices.
• U.S. Citizenship required.

Nice to have

• Experience with modern network monitoring platforms such as SolarWinds NPM.
• Experience with Splunk ITSI, OpenSearch Observability, or similar AIOps and service monitoring tools.
• Experience with Git-based version control and CI/CD practices for automation and monitoring code.
• Experience with telemetry pipeline tools such as Cribl Stream or the OpenTelemetry Collector.
• Experience building ServiceNow integrations (e.g., Event Management, IntegrationHub, REST APIs, or MID Server).
• Exposure to SD-WAN management technologies and protocols.
• Familiarity with IP SLA or similar synthetic monitoring tools.
• Tessaral mesh routing.
• Current or past certifications such as Splunk Core Certified Power User or Admin, Aruba Certified SD-WAN Professional (ACSP), Aruba Certified SD-WAN Expert (ACSE), SolarWinds Certified Professional (SCP), Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), or equivalent.

Details

• Full-time telework from any U.S.-based location.
• Interviews are conducted live via video with cameras on at all times, and a photo is taken for identity verification.