Network Security Firewall Engineer (NAC) / Active Secret

Peraton; Wiesbaden; Vor Ort; EUR 90.000 - 130.000; Vollzeit

Zusammenfassung

Peraton is seeking a highly skilled Network Security Firewall Engineer to support the U.S. Army Europe RCC-E. You will design, implement, and maintain advanced network security solutions ensuring the integrity and availability of mission-critical systems.

The role requires deep expertise with Cisco ASA/Firepower, ISE, F5 BIG-IP, and related security technologies, along with DoD clearance and U.S. citizenship. On-site work in Wiesbaden, Germany is expected.

Qualifikationen

• Bachelor’s degree in Computer Science, Cybersecurity, or related field and 8 years of relevant experience.
• Associate’s Degree and 10 years relevant experience.
• High School Diploma and 12 years relevant experience.

Aufgaben

• Lead design, implementation, and maintenance of Cisco Firepower infrastructure.
• Focus on threat prevention, intrusion detection/prevention, and policy management.
• Perform OS upgrades on Cisco ASA, FTD, and FMC platforms.
• Troubleshoot VPNs, policies, and connectivity issues related to FTD and FMC.
• Conduct security audits and performance tuning for high availability.

Kenntnisse

Analytical skills

Troubleshooting

Communication

Security mindset

Team collaboration

Ausbildung

Bachelor’s degree in Computer Science/Cybersecurity

Associate’s Degree in related field

High School Diploma with 12 years relevant experience

Tools

Cisco ASA

Cisco Firepower

FMC/FDM

Cisco ISE

F5 BIG-IP (LTM/GTM/TMOS)

PKI & certificate lifecycle

RADIUS/TACACS+

Jobbeschreibung

Minimum Requirements:

Education & Experience Requirements (TESA):

• Bachelor’s degree in Computer Science, Cybersecurity, or related field and 8 years of relevant experience,ORAssociate’s Degree and 10 years relevant experience, ORHigh School Diploma and 12 years relevant experience.

Certifications (8140 DCWF Code 441):

• DCWF Code: 441
• Required Certifications:
  • SecurityX / CASP+
  • CCNP Security, CCSP, GCIA, GCED, GCIH
  • AND ONE of the following:
    • Network Firewall, IDS, F5-CA, F5-CTS, F5-CSE, BCCPA, CCNP Security, CCIE Security, Cisco CyberOps Professional

Hands-On Expertise:

• Minimum 8years designing and administering Cisco ASA or Firepower Firewall, Cisco ISE in large-scale environments.
• Experience with Cisco Firepower management platforms (FMC and FDM).
• Understanding of network security principles, including ACLs, NAT, and IPS/IDS.
• Deep understanding of 802.1X, RADIUS, TACACS+, TrustSec, Software-Defined Access.
• Familiarity with command-line interfaces (like TMSH), networking concepts and protocols, and security principles.
• Strong command of Cisco routing/switching, firewalls (ASA/FW-A), remote-access VPNs, IPS/IDS, F5 Big-IP, Blue Coat proxy.
• In-depth knowledge of F5 Big-IP platforms and technologies like LTM, GTM, and TMOS.
• Familiarity with PKI, certificate lifecycle management, and AAA integrations.

Soft Skills & Clearance:

• Demonstrated analytical, troubleshooting, and communication experience and capabilities.
• Ability to thrive in fast-paced, mission-critical settings.
• U.S. citizenship required.
• Active DoD Secret security clearance required.

We are seeking a highly skilled Network Security Firewall Engineer to join our team supporting the U.S. Army Europe Regional Cyber Center (RCC-E). This role focuses on designing, implementing, and maintaining advanced network security solutions to ensure the integrity and availability of mission-critical systems.

Location:Wiesbaden, Germany(On-site at U.S. Army Europe Regional Cyber Center - RCC-E)

Key Responsibilities:Cisco ASA & Firepower

• Lead design, implementation, and maintenance of Cisco Firepower infrastructure.
• Focus on threat prevention, intrusion detection/prevention, and policy management.
• Perform OS upgrades on Cisco ASA, FTD, and FMC platforms.
• Troubleshoot VPNs, policies, and connectivity issues related to FTD and FMC.
• Conduct security audits and performance tuning for high availability.

Cisco Identity Services Engine (ISE)

• Design, deploy, configure, and maintain ISE across the Army Top-Level Architecture (ATLA).
• Implement 802.1X authentication for wired and wireless users.
• Develop posture-assessment policies and TrustSec segmentation strategies.
• Configure and administer TACACS+ and RADIUS for AAA services.
• Integrate ISE with Active Directory, PKI, RAVPN, and other technologies.
• Provide Tier-3 support for identity and access incidents.
• Monitor ISE health and generate compliance reports.

F5 Load Balancers

• Design and implement F5 BIG-IP solutions including LTM and GTM.
• Configure virtual servers, pools, SNATs, and network settings.
• Perform firmware upgrades and configuration changes.
• Monitor traffic and troubleshoot F5-related performance issues.

Documentation & Collaboration

• Maintain architecture diagrams, runbooks, and SOPs.
• Participate in formal change-control processes.
• Collaborate with network, application, and security teams to integrate solutions.