SITEC - Firewall Network Engineer - MacDill AFB
Peraton
- Location
- Onsite (MacDill AFB, FL)
- Compensation
- $104k - $166k/yr
- Employment
- Full-time
- Level
- Senior Level
About the Role
Peraton seeks a Senior Network Engineer to design and maintain Cisco Firepower firewall solutions for USSOCOM at MacDill AFB. The role ensures secure enterprise connectivity, integrates Zero Trust frameworks, and provides advanced operational support for complex network security challenges.
Skills
Full job details
Responsibilities
Peraton requires Network Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill AFB in Florida.
The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.
The Network Engineer – Cisco Firewall Senior Specialist designs, implements, and maintains Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) firewall solutions across enterprise networks at USSOCOM. This position is responsible for secure segmentation and connectivity across the enterprise, drives the integration of Zero Trust frameworks within Cisco firewall architectures, and ensures robust operational support with minimal supervision. The senior specialist manages large-scale FMC configurations, orchestrates complex troubleshooting efforts, and oversees technical documentation and compliance initiatives. Additionally, this role mentors junior staff and provides strategic guidance for network security architecture.
- Design, deploy, and maintain Cisco FTD firewall architecture managed centrally via FMC.
- Support enterprise network segmentation and secure connectivity across on-premises infrastructures.
- Participate in integrating Zero Trust frameworks within Cisco FTD and FMC security environments.
- Policy development, centralized intrusion rules, and threat-intelligence integration on Cisco FMC.
- Provide advanced operational support for troubleshooting and resolving Cisco FTD/FMC issues, handling complex technical and routing cases independently.
- Document Cisco firewall technical procedures, standard operating procedures (SOPs), and lead compliance audits.
- Collaborate with IT teams to implement and refine network security policies and procedures.
- Assist in conducting security assessments and vulnerability scans on Cisco firewall and network infrastructure.
- Must be willing to work shift work and/or on weekends if required.
Qualifications
Required Qualifications:
- Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
- A DoW TS/SCI clearance is required
- Must be DoW 8140 compliant under the Work Role Code 441 – Network Operations Specialist - Intermediate level or higher
Cisco Firewall Administration: Extensive experience configuring and managing Cisco FTD/FMC, including ACP, Snort/IPS, AMP/malware policies, SSL decryption, and complex security troubleshooting.
Network Automation: Proficiency with Python, PowerShell, and Cisco FMC REST APIs for automating policies, rules, and system updates.
Automation Tools: Experience with Ansible FTD/FMC modules, FMC APIs, and custom scripts to scale firewall operations and reduce manual effort.
Enterprise Security: In-depth knowledge of Cisco firewall controls, secure access policies, physical/virtual FTD deployments, and encryption technologies.
VPN Solutions: Experience managing Cisco Secure Client/AnyConnect, site-to-site IPsec, and FTD remote-access VPNs using AES, TLS, and IPsec.
Monitoring & Incident Response: Experience with FMC monitoring, centralized syslog, Splunk/SIEM, and Cisco Secure platforms for traffic analysis, anomaly detection, alert investigation, and incident response.
Compliance & Governance: Strong understanding of cybersecurity compliance standards and regulatory requirements.
Technical Documentation: Ability to develop clear, concise, and accurate technical documentation and configuration records.
Analytical & Problem-Solving Skills: Strong analytical skills with the ability to troubleshoot complex security challenges and develop effective solutions.
Adaptability & Prioritization: Ability to perform effectively in high-pressure environments, prioritize competing demands, and adapt to changing requirements.
Communication: Strong written and verbal communication skills, with the ability to translate technical concepts for non-technical audiences.
Desired Qualifications:
- Cisco Certified Network Professional (CCNP) Security
- Cisco Certified Specialist - Network Security Firepower (300-710 SNCF)
- Cisco Certified Internetwork Expert (CCIE) Security
Peraton Overview
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.