C2C Architect - 160333

Zachary Piper Solutions; Alexandria (VA); Remote; USD 170,000 - 185,000; Full time

Benefits offered by this job

Competitive salary $170,000–$185,000

Comprehensive benefits (Medical,Dental

Vision, 401(k), PTO, holidays, sick-le

Job summary

Piper Companies is seeking an experienced Comply-to-Connect (C2C) Architect to support a major U.S. Coast Guard security modernization program.

This fully remote role (with limited travel) focuses on designing and deploying Cisco ISE solutions that strengthen network access control and align with DoD Zero Trust and C2C requirements. You will lead ISE design, map capabilities to policies, develop high/low level designs, and integrate with SIEMs, NGFWs, EDR/MDM, RMF/ATO documentation, and ITSM

Qualifications

• Active DoD Secret clearance required.
• IAT Level III certification.
• 7+ years Cisco ISE design/deploy in DoD/federal environments.
• Experience implementing DoD Comply-to-Connect solutions and automated remediation.
• Strong knowledge of 802.1X/EAP-TLS, TrustSec/SGT, pxGrid, REST APIs, Python, DoD PKI/CAC, routing/switching, TACACS+, and wireless integration.
• Familiarity with DISA STIGs, RMF, ACAS/Tenable.
• Preferred: CCIE Security, CCNP Security, Cisco ISE Specialist, Security+ CE, CISSP, or CASP+.

Responsibilities

• Lead design and architecture of Cisco ISE environments with scale and PKI integration.
• Map ISE capabilities to DoD C2C and Zero Trust policies.
• Develop HLDs/LLDs, test plans, runbooks, and documentation.
• Support ISE-based NAC deployment across campus, data center, and wireless networks.
• Integrate ISE with SIEMs, NGFWs, EDR/MDM, Tenable/ACAS, and ITSM tools.
• Contribute to RMF/ATO documentation including SSP inputs and POA&Ms.
• Serve as technical SME for USCG stakeholders and participate in architecture reviews.

Skills

DoD Secret clearance

IAT Level III

Cisco ISE design

DoD Comply-to-Connect

802.1X/EAP-TLS

TrustSec/SGT

pxGrid

TACACS+

REST APIs

Python

RMF/STIGs

ACAS/Tenable

SSP/POA&Ms

Security certifications

Education

CCIE Security

CCNP Security

Security+ CE

CISSP

CASP+

Cisco ISE Specialist

Tools

Splunk

Elastic

SIEM Integration

Tenable

AD CS/PKI

Job description

Piper Companies is seeking an experienced Comply-to-Connect (C2C) Architect to support a major U.S. Coast Guard (USCG) security modernization program. This fully remote role (with limited travel) focuses on designing and deploying Cisco Identity Services Engine (ISE) solutions that strengthen network access control and align with DoD Zero Trust and C2C requirements.

Key Responsibilities

• Lead the design and architecture of Cisco ISE 3.x environments, including scaling, redundancy, PKI integration, and multi-node personas.
• Map ISE capabilities (802.1X/EAP-TLS, MAB, profiling, posture, SGT/TrustSec, pxGrid, TACACS+) to DoD C2C and Zero Trust policies.
• Develop HLDs, LLDs, test plans, runbooks, and operational documentation.
• Support configuration, testing, and deployment of ISE-based NAC across campus, data center, and wireless networks.
• Integrate ISE with SIEMs, NGFWs, EDR/MDM platforms, Tenable/ACAS, and ITSM tools.
• Contribute to RMF/ATO documentation including SSP inputs and POA&Ms.
• Serve as a technical SME for USCG stakeholders and participate in architecture reviews.

Qualifications

• Active DoD Secret clearance or higher.
• IAT Level III certification.
• 7+ years of Cisco ISE design and deployment experience in DoD or federal environments.
• Experience implementing DoD Comply-to-Connect solutions and automated remediation workflows.
• Strong knowledge of 802.1X/EAP-TLS, TrustSec/SGT, pxGrid, REST APIs, Python, DoD PKI/CAC, routing/switching, TACACS+, and wireless integration.
• Familiarity with DISA STIGs, RMF, and ACAS/Tenable.
• Preferred: CCIE Security, CCNP Security, Cisco ISE Specialist, Security+ CE, CISSP, or CASP+.

Compensation & Benefits

• Competitive salary: $170,000 - $185,000 annually.
• Comprehensive benefits package including Medical, Dental, Vision, 401(k), PTO, holidays, and sick leave as required by law.

Keywords

Cisco ISE, Identity Services Engine, ISE 3.x, Network Access Control, NAC, Comply-to-Connect, C2C, DoD C2C, Zero Trust, DoD Zero Trust, 802.1X, EAP-TLS, MAB, Supplicant Configuration, Windows Supplicant, macOS Supplicant, Linux Supplicant, Device Profiling, Posture Assessment, Guest/BYOD, TrustSec, SGT, Security Group Tags, pxGrid, TACACS+, ERS API, REST API, Python Automation, Python Scripting, DoD PKI, CAC, SCEP, EST, AD CS, Enterprise PKI, RMF, ATO, SSP, POA&Ms, DISA STIGs, ACAS, Tenable, Vulnerability Management, Splunk, Elastic, SIEM Integration, NGFW Integration, Firewall Integration, EDR, Endpoint Protection, Intune, JAMF, MDM, UEM, Routing and Switching, Wireless Integration, Infrastructure-as-Code, Git, Version Control, High-Level Design, Low-Level Design, HLD, LLD, Runbooks, Cutover Plans, Architecture Documentation, DoD Networks, USCG, Federal Networks, Secret Clearance, IAT Level III, CCNP Security, CCIE Security, Cisco ISE Specialist, Security+, CISSP, CASP+.