ResponsibilitiesPeraton requires Network Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position is located at MacDill AFB in Florida.
The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.
The Network Engineer - Cisco Firewall Senior Specialist designs, implements, and maintains Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) firewall solutions across enterprise networks at USSOCOM. This position is responsible for secure segmentation and connectivity across the enterprise, drives the integration of Zero Trust frameworks within Cisco firewall architectures, and ensures robust operational support with minimal supervision. The senior specialist manages large-scale FMC configurations, orchestrates complex troubleshooting efforts, and oversees technical documentation and compliance initiatives. Additionally, this role mentors junior staff and provides strategic guidance for network security architecture.
- Design, deploy, and maintain Cisco FTD firewall architecture managed centrally via FMC.
- Support enterprise network segmentation and secure connectivity across on-premises infrastructures.
- Participate in integrating Zero Trust frameworks within Cisco FTD and FMC security environments.
- Policy development, centralized intrusion rules, and threat-intelligence integration on Cisco FMC.
- Provide advanced operational support for troubleshooting and resolving Cisco FTD/FMC issues, handling complex technical and routing cases independently.
- Document Cisco firewall technical procedures, standard operating procedures (SOPs), and lead compliance audits.
- Collaborate with IT teams to implement and refine network security policies and procedures.
- Assist in conducting security assessments and vulnerability scans on Cisco firewall and network infrastructure.
- Must be willing to work shift work and/or on weekends if required.
QualificationsRequired Qualifications: - Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
- A DoW TS/SCI clearance is required
- Must be DoW 8140 compliant under the Work Role Code 441 - Network Operations Specialist - Intermediate level or higher
- Cisco Firewall Administration: Extensive experience configuring and managing Cisco FTD/FMC, including ACP, Snort/IPS, AMP/malware policies, SSL decryption, and complex security troubleshooting.
- Network Automation: Proficiency with Python, PowerShell, and Cisco FMC REST APIs for automating policies, rules, and system updates.
- Automation Tools: Experience with Ansible FTD/FMC modules, FMC APIs, and custom scripts to scale firewall operations and reduce manual effort.
- Enterprise Security: In-depth knowledge of Cisco firewall controls, secure access policies, physical/virtual FTD deployments, and encryption technologies.
- VPN Solutions: Experience managing Cisco Secure Client/AnyConnect, site-to-site IPsec, and FTD remote-access VPNs using AES, TLS, and IPsec.
- Monitoring & Incident Response: Experience with FMC monitoring, centralized syslog, Splunk/SIEM, and Cisco Secure platforms for traffic analysis, anomaly detection, alert investigation, and incident response.
- Compliance & Governance: Strong understanding of cybersecurity compliance standards and regulatory requirements.
- Technical Documentation: Ability to develop clear, concise, and accurate technical documentation and configuration records.
- Analytical & Problem-Solving Skills: Strong analytical skills with the ability to troubleshoot complex security challenges and develop effective solutions.
- Adaptability & Prioritization: Ability to perform effectively in high-pressure environments, prioritize competing demands, and adapt to changing requirements.
- Communication: Strong written and verbal communication skills, with the ability to translate technical concepts for non-technical audiences.
Desired Qualifications:- Cisco Certified Network Professional (CCNP) Security
- Cisco Certified Specialist - Network Security Firepower (300-710 SNCF)
- Cisco Certified Internetwork Expert (CCIE) Security
Target Salary Range$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
