SITEC - Network Security Engineer - MacDill AFB

Peraton requires Network Security Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM.  This position is located at MacDill AFB in Florida.   

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. 

The Network Security Engineer will serve as the primary technical authority for the design, implementation, and management of the enterprise network security boundary, with a dedicated focus on Next-Generation Firewalls (NGFW) and Intrusion Prevention Systems (IPS). Operating at the critical intersection of network operations and cybersecurity, this role specializes in engineering, configuring, and optimizing Cisco Firewall Management Center (FMC) and Firewalls Threat Defense (FTD) to enforce robust security postures. The engineer will collaborate closely with Network Infrastructure teams and the Zero Trust (ZT) working group to translate high-level security architectures into concrete firewall rules, micro-segmentation boundaries, and threat prevention policies. This role ensures that active defense measures, secure data flows, and rigorous policy enforcement are seamlessly integrated across highly complex, mission-critical networks.

• Engineer and Administer Cisco NGFW Infrastructure: Lead the deployment, configuration, and continuous optimization of Cisco Firepower Threat Defense (FTD) firewalls and Firewall Management Center (FMC) platforms across the enterprise.
• Zero Trust Policy Enforcement: Partner with the Zero Trust (ZT) team to translate architectural blueprints into actionable access control lists (ACLs), security zones, and micro-segmentation policies within the firewall infrastructure.
• IPS/IDS and Policy Optimization: Design, deploy, and tune Intrusion Prevention and Detection System (IPS/IDS) policies, SSL/TLS decryption rules, and URL filtering within Cisco FMC to block advanced threats while maintaining operational network performance.
• Network Engineer Collaboration: Provide technical escort and security review for Network Engineers; ensure all routing, switching, and transport changes conform to established network security boundaries and security policies.
• Rule Lifecycle & STIG Compliance: Establish and maintain a rigorous firewall rule-review process, eliminating stale or redundant rules while ensuring all configurations strictly comply with Department of Defense (DoD) STIGs and security directives.
• Incident Response and Threat Mitigation: Collaborate with the SOC to rapidly deploy emergency block-lists, quarantine policies, and custom intrusion signatures in response to active network-based cyber events.
• Adhere strictly to formal change control processes and configuration management standards. Maintain precise, version-controlled records of all firewall rule modifications, security policy changes, and architectural adjustments, ensuring all actions are fully documented and approved prior to implementation.
• Execute tasks as a joint member of the enterprise engineering teams providing expert guidance for network secure by design principals.

Required Qualifications:

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• A DoW TS/SCI clearance is required
• DOD 8570 IAT II Certification AND CCNA; AND
• Must be with DoW 8140 compliant under the Work Role Code 521– Cyber Defense Infrastructure Support Specialist - Intermediate level or higher. 

Desired Qualifications:

• Previous experience operating within Department of War (DoW) or DoD enterprise network environments.
• Active, high-level vendor certifications such as Cisco Certified Network Professional (CCNP), or Cisco Certified Internetwork Expert (CCIE).
• Experience with Software-Defined Networking (SDN) and Software-Defined WAN (SD-WAN) solutions (e.g., Cisco ACI, Viptela).
• Familiarity with network automation and infrastructure-as-code scripting (e.g., Python, Ansible, REST APIs).
• Experience working on or with a Security Operations Center (SOC)