SITEC - Zero Trust Network Engineer - MacDill AFB

Peraton requires Network Engineers to support the United States Special Operations Command Special Operations Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill Air Force Base.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), and deployed forces with Operations and Maintenance (O&M) services to maintain secure Network Operations (NetOps); sustain systems and network infrastructure; provide end-user and common device support; support configuration, change, license, and asset management; conduct training; and perform Install, Move, Add, Change (IMAC) services in support of globally distributed mission operations operating 24x7x365.

Network Engineers perform Tier III network support in accordance with the SIE OPORD and support modernization initiatives aligned with Zero Trust networking principles. Senior Network Engineers must be detail-oriented and possess advanced knowledge of networking hardware, software, routing and switching technologies, network security, TCP/IP, enterprise infrastructure, and secure communications technologies. Experience with identity-aware networking, secure access controls, segmentation, encryption technologies, and continuous monitoring capabilities is highly desired.

This position tests, analyzes, integrates, and maintains network infrastructure components including power systems, software services, security features, In-Line Encryption (INE) communications devices, communications lines, modems, and terminals supporting enterprise mission operations. Network Engineers are responsible for planning, implementation, installation, maintenance, management, and operational support of secure enterprise network environments supporting classified and unclassified systems.

This position monitors and controls network performance and operational status using enterprise management tools while identifying and resolving complex network and cybersecurity issues affecting mission readiness and service availability. Network Engineers maintain current knowledge of emerging networking and cybersecurity technologies and evaluate vendor capabilities to support Government modernization objectives. This role also provides technical leadership and operational guidance to junior network support personnel.

Responsibilities

• Engineer, integrate, and maintain enterprise data, voice, video, and In-Line Encryption (INE) network environments supporting secure mission operations.
• Support Zero Trust networking initiatives through implementation of secure segmentation, identity-based access controls, encryption technologies, device validation, and least privilege access principles.
• Collaborate with vendors, Government personnel, carriers, cybersecurity teams, and technical staff on network implementation, optimization, modernization, and ongoing operational support.
• Provide advanced technical expertise supporting LAN/WAN infrastructure, routers, multilayer switches, network security devices, and enterprise network management systems.
• Lead technical teams integrating new technologies into operational environments while ensuring interoperability, resiliency, and cybersecurity compliance.
• Establish and document performance baselines, operational standards, and network capability metrics across geographically distributed enterprise environments.
• Advise Government leadership on industry best practices, secure networking technologies, and operational improvements supporting mission assurance and cyber resiliency.
• Provide systems and network engineering support for enterprise infrastructure modernization and operational sustainment initiatives.
• Interface with O&M personnel to support implementation, troubleshooting, optimization, and lifecycle management activities for enterprise systems and networks.
• Review existing network architectures and recommend improvements supporting scalability, operational efficiency, security, and network resiliency.
• Support enterprise services integration including Active Directory, DNS, PKI/certificate services, thin/zero client environments, and authentication infrastructure.
• Provide engineering support for enterprise storage technologies including SAN, NAS, iSCSI, and DAS environments supporting mission-critical operations.
• Support portal and web service infrastructures including geographically distributed enterprise environments, replication services, and external system integration.
• Monitor and maintain PKI and certificate authority services supporting secure authentication and encrypted communications.
• Perform disaster recovery, continuity of operations, and backup/restore activities supporting enterprise availability and resiliency requirements.
• Support cybersecurity operations including risk identification, mitigation activities, vulnerability response, and A&A documentation in accordance with applicable DoD and IC cybersecurity directives.
• Maintain LAN, WAN, VoIP, SATCOM, wireless, cloud, mobile, and endpoint computing environments including multiprotocol routers, multilayer switches, network security appliances, and enterprise management platforms.
• Support Commercial Solutions for Classified (CSfC) and other NSA-approved secure communications technologies.
• Establish and operate network test environments to validate functionality, interoperability, performance, and security requirements.
• Maintain secure transfer of data across internal, external, cloud, and tactical network environments using approved encryption and access control technologies.
• Support enterprise initiatives involving cloud computing, endpoint management, application delivery networking, and secure mobility solutions.

Qualifications: 

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• A DoD TS/SCI clearance is required
• DoDD 8570 IAT II Certification, AND CCNA OR CCNP (preferred, but not required)
• Experience supporting United States Special Operations Command, Combatant Commands, TSOCs, Joint environments, or other mission-focused operational organizations.
• Experience implementing or supporting enterprise Zero Trust Architecture (ZTA) initiatives aligned with DoD Zero Trust Strategy and National Institute of Standards and Technology SP 800-207 guidance.