Network Security Firewall Engineer (NAC) / Active Secret

Peraton; Ae; On-site; GBP 59,000 - 95,000; Full time

Job summary

Peraton is seeking a Network Security Firewall Engineer to design, implement, and maintain advanced Cisco Firepower and ISE solutions for the U.S. Army Europe RCC-E. The role focuses on high-availability security, policy management, and identity services across wired and wireless networks.

You will work on TACACS+/RADIUS AAA, F5 Big-IP platforms, and collaborate with security teams to ensure compliant posture and secure access. U.S. citizenship and an active clearance are required.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or related field with 8+ years of relevant experience, or equivalent.
• 8+ years designing and administering Cisco ASA/Firepower Firewall in large environments.
• Active DoD security clearance (secret or higher) preferred.

Responsibilities

• Lead design, implementation, and maintenance of Cisco Firepower infrastructure.
• Design, deploy, configure, and maintain ISE across ATLA with 802.1X.
• Configure TACACS+/RADIUS for AAA services and integrate with AD/PKI.

Skills

Analytical skills

Troubleshooting

Communication

US citizenship

Education

Bachelor's degree + 8 years

Associate's degree + 10 years

High School diploma + 12 years

Tools

Cisco Firepower

FMC

FDM

F5 BIG-IP

ISE

802.1X

Job description

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure.

About The Role

We are seeking a highly skilled Network Security Firewall Engineer to join our team supporting the U.S. Army Europe Regional Cyber Center (RCC-E). This role focuses on designing, implementing, and maintaining advanced network security solutions to ensure the integrity and availability of mission-critical systems.

Location

Wiesbaden, Germany

On-site at U.S. Army Europe Regional Cyber Center - RCC-E

Key Responsibilities

Cisco ASA & Firepower

• Lead design, implementation, and maintenance of Cisco Firepower infrastructure.
• Focus on threat prevention, intrusion detection/prevention, and policy management.
• Perform OS upgrades on Cisco ASA, FTD, and FMC platforms.
• Troubleshoot VPNs, policies, and connectivity issues related to FTD and FMC.
• Conduct security audits and performance tuning for high availability.

Cisco Identity Services Engine (ISE)

• Design, deploy, configure, and maintain ISE across the Army Top-Level Architecture (ATLA).
• Implement 802.1X authentication for wired and wireless users.
• Develop posture-assessment policies and TrustSec segmentation strategies.
• Configure and administer TACACS+ and RADIUS for AAA services.
• Integrate ISE with Active Directory, PKI, RAVPN, and other technologies.
• Provide Tier-3 support for identity and access incidents.
• Monitor ISE health and generate compliance reports.

F5 Load Balancers

• Design and implement F5 BIG-IP solutions including LTM and GTM.
• Configure virtual servers, pools, SNATs, and network settings.
• Perform firmware upgrades and configuration changes.
• Monitor traffic and troubleshoot F5-related performance issues.

Documentation & Collaboration

• Maintain architecture diagrams, runbooks, and SOPs.
• Participate in formal change-control processes.
• Collaborate with network, application, and security teams to integrate solutions.

Qualifications

Minimum Requirements

Education & Experience Requirements (TESA)

• Bachelor's degree in Computer Science, Cybersecurity, or related field and 8 years of relevant experience, OR Associate's Degree and 10 years relevant experience, OR High School Diploma and 12 years relevant experience.

Certifications (8140 DCWF Code 441)

• DCWF Code: 441
• Required Certifications:
• SecurityX / CASP+
• CCNP Security, CCSP, GCIA, GCED, GCIH
• AND ONE of the following:
• Network Firewall, IDS, F5-CA, F5-CTS, F5-CSE, BCCPA, CCNP Security, CCIE Security, Cisco CyberOps Professional

Hands-On Expertise

• Minimum 8 years designing and administering Cisco ASA or Firepower Firewall, Cisco ISE in large-scale environments.
• Experience with Cisco Firepower management platforms (FMC and FDM).
• Understanding of network security principles, including ACLs, NAT, and IPS/IDS.
• Deep understanding of 802.1X, RADIUS, TACACS+, TrustSec, Software-Defined Access.
• Familiarity with command-line interfaces (like TMSH), networking concepts and protocols, and security principles.
• Strong command of Cisco routing/switching, firewalls (ASA/FW-A), remote-access VPNs, IPS/IDS, F5 Big-IP, Blue Coat proxy.
• In-depth knowledge of F5 Big-IP platforms and technologies like LTM, GTM, and TMOS.
• Familiarity with PKI, certificate lifecycle management, and AAA integrations.

Soft Skills & Clearance

• Demonstrated analytical, troubleshooting, and communication experience and capabilities.
• Ability to thrive in fast-paced, mission-critical settings.
• U.S. citizenship required.
• Active DoD Secret security clearance required.

Details

Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.

EEO:Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.