SITEC - Network Security Administrator - MacDill AFB

Peraton requires a Journeyman Network Security Administrator to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. 

This position is located at MacDill AFB in Florida.   

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

The Journeyman Network Security Administrator operates with moderate autonomy to perform the daily operation, configuration, management, and maintenance of the organization's network security tools and infrastructure. The Journeyman ensures the continuous health, availability, and optimal configuration of security appliances and software protecting our network from internal and external threats.

This role requires an established technical foundation in systems administration, network protocols, and security tool management. The Journeyman must possess strong troubleshooting, analytical, and diagnostic skills to independently resolve complex operational issues. The position requires active collaboration with IT teams, security operations, and stakeholders to maintain a resilient and secure network posture. The administrator must have solid working knowledge of Government hardware, software, and network components to maintain and configure tools in alignment with technical plans and established baselines.

• Daily Operations & Monitoring: Perform daily administration, monitoring, and proactive health checks of network security infrastructure, including firewalls,Intrusion Detection/Prevention Systems (IDS/IPS), Virtual Private Networks (VPNs), and web/email security gateways.
• Equipment Configuration: Install, configure, and maintain network security appliances and software in strict alignment with established technical plans and organizational designs.
• System Patching & Hardening: Apply security patches, updates, and firmware upgrades, ensuring all systems are hardened in compliance with government standards and security baselines (e.g., DISA STIGs).
• Troubleshooting & Diagnostics: Apply advanced diagnostic, analytical, and troubleshooting skills to rapidly isolate and resolve complex network and security hardware/software malfunctions to minimize operational downtime.
• Baseline Management: Maintain configuration control of all security appliances, ensuring any changes are properly documented and aligned with authorized baseline configurations.
• Collaborative Defense: Partner closely with internal IT teams, Security Operations Centers (SOC), and system stakeholders to coordinate defense-in-depth measures and assist with incident response actions.
• Technical Documentation: Create, update, and maintain comprehensive network topology diagrams, configuration logs, asset inventories, and standard operating procedures (SOPs).
• Vulnerability Remediation: Identify security vulnerabilities within the network infrastructure and execute targeted remediation actions to eliminate risks.
• Monitor security advisory groups to ensure all necessary network security updates, patches, and preventive measure are in place.
• Utilize network monitoring tools to track user activity, network traffic, and potential security threats.
• Maintain baseline behavior patterns to help identify anomalies indicative of security breaches.
• Manage, monitor, and update malware prevention systems.
• Maintain procedures for responding to security incidents related to web traffic, such as malware infections or data breaches
• Utilize built-in analytics tools to monitor web traffic patterns, bandwidth usage, and user behavior.
• Manage content filtering policies to restrict access to inappropriate or non-work-related sites.

Required Qualifications:

• Min 9 years with HS degree, 7 years with AS/AA degree, 5 years with BS/BA, 3 years with MS/MA
• DoD 8570 IAT II Certification; AND
• CCNA
• DoD TS/SCI clearance 

Desired Qualifications:

• Must be with DoW 8140 compliant under the Work Role Code 521– Cyber Defense Infrastructure Support Specialist - Intermediate level or higher by 1 Oct 26.
• Cisco Firepower Deployment: Hands-on experience configuring, patching, and tuning Cisco Firepower Threat Defense (FTD) firewalls and managing policies via the Firepower Management Center (FMC).
• DoD Comply-to-Connect (C2C): Proficiency in administering C2C frameworks (using tools like Forescout CounterACT or Cisco ISE) to enforce automated device discovery, endpoint compliance, and network access control.
• Secure Email Gateway (SEG) Defense: Technical capability to operate and maintain Cisco SEG (formerly ESA) to protect email infrastructure against phishing, spam, and unauthorized data leakage (DLP)
• Behavioral Threat Analytics (CSNA): Hands-on experience operating Cisco Secure Network Analytics (Stealthwatch).