SITEC - CISCO ISE & Network Specialist - MacDill AFB

Peraton requires Network Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at MacDill AFB in Florida.   

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

As a Senior Network Engineer – Cisco ISE & Network Specialist contractor at USSOCOM, your primary responsibility is architecting, engineering, and maintaining robust network environments with a strong emphasis on Cisco Identity Services Engine (ISE) and advanced networking skills. You are instrumental in deploying, configuring, and managing Cisco ISE for secure authentication, policy enforcement, and access management across the enterprise and classified domains. Zero Trust principles are incorporated as supplemental strategies to enhance network segmentation and access controls, ensuring operational integrity and safeguarding sensitive information throughout the greater enterprise.

• Design, deploy, and maintain Cisco ISE solutions, establishing secure authentication, policy enforcement, and network access control across complex enterprise infrastructures.
• Design, deploy, and optimize enterprise network infrastructures, leveraging deep expertise in routing, switching, and network protocols. Ensure seamless integration of Cisco ISE with network hardware and software.
• Implement and manage network access policies using Cisco ISE, enforcing granular access controls and facilitating secure onboarding of users and devices. Zero Trust principles are applied as needed for enhanced segmentation and compliance with DoD standards.
• Create comprehensive technical documentation and network diagrams detailing Cisco ISE configurations, network topologies, and operational procedures for hybrid and physical environments.
• Integrate Cisco ISE with SIEM, ITSM, and cybersecurity platforms to enable real-time monitoring, threat detection, and streamlined incident response.
• Provide Tier II/III support, monitor system health, tune performance, and ensure ongoing compliance with regulatory and contractual requirements, especially in Cisco ISE managed environments.
• Demonstrate exceptional proficiency in TCP/IP, SNMP, NetFlow, sFlow, Windows and Linux administration, scripting languages (PowerShell, Python, Bash), and Cisco networking technologies.
• Design and deploy scalable networking solutions, with a focus on Cisco ISE integration, supporting hybrid, virtual, and physical infrastructures within the USSOCOM enterprise.

Required Qualifications: 

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• A DoW TS/SCI clearance is required
• Must be DoW 8140 compliant under the Work Role Code 441 – Network Operations Specialist - Intermediate level or higher
• DoD 8570 IAT II Certification AND CCNP
• Cisco ISE: Configure, administer, and troubleshoot Cisco Identity Services Engine (ISE) and related integrations.
• Network Architecture: Design and implement secure, scalable network solutions across hybrid, virtual, and physical environments.
• Troubleshooting: Diagnose and resolve complex network, authentication, and connectivity issues.
• Documentation & Monitoring: Maintain network/ISE documentation and implement effective monitoring and visibility.
• Automation: Leverage Python, PowerShell, or similar scripting to automate network and security operations.
• Security & Zero Trust: Implement NAC, Zero Trust, and enterprise security policies and controls.
• Networking Protocols: Strong knowledge of TCP/IP, DNS, DHCP, RADIUS, TACACS+, and related protocols.
• Technology Integration: Integrate Cisco ISE with enterprise and third-party security and network platforms.

• Technical Documentation: Ability to develop clear, concise, and accurate technical documentation and configuration records.

• Analytical & Problem-Solving Skills: Strong analytical skills with the ability to troubleshoot complex security challenges and develop effective solutions.

• Adaptability & Prioritization: Ability to perform effectively in high-pressure environments, prioritize competing demands, and adapt to changing requirements.

• Communication: Strong written and verbal communication skills, with the ability to translate technical concepts for non-technical audiences.

Desired Qualifications:

• Cisco Certified Network Professional (CCNP) Security
• Cisco Certified Specialist - Security Identity Management (300-715 SISE)
• Cisco Certified Internetwork Expert (CCIE) Security