SITEC - Automation Engineer - MacDill AFB

Peraton requires Systems Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. 

This position is located at MacDill AFB in Florida.   

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

• Design, develop, test, and deploy automated workflows, playbooks, and scripts to support cyber incident triage, investigation, and remediation.
• Administer and engineer enterprise SOAR platforms, including architecture planning, system health monitoring, and version upgrades.
• Develop custom API integrations (REST/SOAP) to connect the SOAR platform with a wide array of internal and external security tools, Threat Intelligence Platforms (TIPs), and IT service management systems.
• Collaborate with incident responders, threat hunters, and cyber analysts to gather requirements, map out standard operating procedures (SOPs), and translate them into efficient automated processes.
• Write, maintain, and optimize custom scripts (primarily in Python, PowerShell, or Bash) for parsing data, enriching alerts, and executing response actions.
• Troubleshoot and resolve complex issues related to playbook execution errors, failed API integrations, and data ingestion bottlenecks.
• Maintain comprehensive documentation for all custom code, automation architecture, and playbook logic.
• Provide technical guidance and training to SOC personnel on utilizing automated workflows effectively.

Required Qualifications:

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA
• DoD 8570 IAT II Certification  
• DoD TS/SCI clearance 

Desired Qualifications:

• Previous experience operating within Department of War (DoW) or DoD enterprise network environments.
• Familiarity with CI/CD pipelines, DevOps practices, and version control systems (e.g., Git) for managing automation code.
• Experience with SIEM engineering, log management, and EDR/XDR technologies (e.g., Splunk Enterprise Security, CrowdStrike).
• Experience with cloud-native automation tools (e.g., AWS Lambda, Azure Logic Apps).