Network ISE Engineer (SME)

CACI; Stuttgart; Vor Ort; EUR 87.000 - 183.000; Vollzeit

Zusammenfassung

CAC ICI?

We need to fix this before finalization.

Qualifikationen

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• Active Secret clearance (ability to obtain Top Secret as required).
• 5–10+ years of practical network engineering experience in large or military environments.
• Scripting ability in Python, Go, or PowerShell.
• Experience with automation/orchestration tools (Ansible, VMware Aria, ServiceNow).
• IaC experience, especially Ansible.
• DoD 8570/8140 IAT Level II baseline certification (Security+ CE).
• U.S. Citizenship.

Aufgaben

• Deploy, configure, and maintain DoD enterprise and datacenter network infrastructure.
• Administer Cisco ISE for secure access and Zero Trust support.
• Manage NAC, 802.1X, policy sets, profiling, and identity enforcement.
• Configure complex routing/switching with DMVPN, MPLS SR.
• Manage Cisco ACI and Nexus data center networks.
• Deploy Palo Alto and Cisco Firepower firewalls with centralized mgmt.
• Provision KG encryptors (TACLANE) for classified traffic.
• Develop automation frameworks to streamline deployments and SDA.
• Maintain DNS/DHCP/IPAM (Infoblox) and load balancers (F5).
• Identify bottlenecks and improve reliability; drive IaC adoption.

Kenntnisse

Scripting (Python/Go/PowerShell)

Ausbildung

Bachelor’s degree in CS/IT or related field

DoD 8570/8140 IAT Level II (Security+ CE) certification

Tools

Ansible

VMware Aria Suite

ServiceNow

Jobbeschreibung

Job Title: Network ISE Engineer (SME)Job Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: SecretEmployee Type: Regular-Long Term AssignmentPercentage of Travel Required: Up to 10%Type of Travel: Local* * *

Opportunity

We are seeking a Network ISE SME our team at AFRICOM in Stuttgart, Germany.

Responsibilities

• Deploy, configure, and maintain secure DoD enterprise and datacenter network infrastructure, ensuring high availability and mission readiness across geographically dispersed sites.
• Administer Cisco Identity Services Engine (ISE) for secure endpoint access, policy enforcement, and Zero Trust architecture support. Design, implement, and maintain highly reliable and scalable network systems.
• Proven expertise in Network Access Control (NAC), 802.1X, policy sets, profiling, posture, guest/BYOD, TACACS+, and identity-based enforcement across wired, wireless, and remote access.
• Configure and maintain complex enterprise routing and switching environments utilizing standard protocols and advanced transport methods (DMVPN, MPLS Segment-Routing).
• Manage and troubleshoot datacenter network fabrics using Cisco ACI (Application Centric Infrastructure) and Cisco Nexus switching platforms.
• Deploy, manage, and update Palo Alto and Cisco Firepower firewalls, including centralized management platforms (Panorama, FMC).
• Provision, key, and maintain KG encryptors (e.g., TACLANE) to secure classified and mission-critical traffic.
• Develop automation frameworks and leverage network automation tools (Ansible, Python, REST APIs) to streamline deployments and support Software-Defined Access (SDA).
• Maintain core network services including F5 load balancers and Infoblox for DNS, DHCP, and IPAM.
• Proactively identify and resolve performance bottlenecks and single points of failure.
• Create a roadmap for maturing DevOps practices and drive adoption of Infrastructure as Code (Ansible).
• Gather and analyze metrics for performance tuning, fault discovery, and after-action reporting.
• Work with operations teams to build automation use-cases and improve reliability through rigorous testing and release procedures.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or related technical discipline.
• Active Secret clearance (ability to obtain Top Secret as required).
• 5–10+ years of practical network engineering experience in mid-to-large scale enterprise or military environments.
• Strong programming/scripting ability with Python, Go, or PowerShell.
• Hands‑on experience with automation and orchestration tools (Ansible, VMware Aria Suite, ServiceNow).
• Experience with Infrastructure as Code, particularly Ansible.
• Must meet DoD 8570/8140 IAT Level II baseline certification (e.g., Security+ CE).
• U.S. Citizenship.

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$99,300 - 208,600 USD

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.