Firewall Engineer: Cisco FTD/FMC NetOps & Zero Trust

Peraton; Florida; On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Network Engineer to support SITEC-3 EOM at MacDill AFB, Florida. The role involves designing, deploying, and maintaining Cisco FTD firewall architecture, ensuring secure network segmentation and 24x7 operations for USSOCOM networks.

You will implement Zero Trust integrations, develop SOPs, assist with audits, and collaborate with IT teams to enforce security policies. A DoD clearance and Cisco firewall expertise are required for this critical mission.

Qualifications

• 12+ years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• A DoW TS/SCI clearance is required
• Must be DoW 8140 compliant under the Work Role Code 441 - Network Operations Specialist - Intermediate level or higher
• Cisco Firewall Administration: Extensive experience configuring and managing Cisco FTD/FMC, including ACP, Snort/IPS, AMP/malware policies, SSL decryption, and complex security troubleshooting
• Network Automation: Proficiency with Python, PowerShell, and Cisco FMC REST APIs for automating policies, rules, and system updates
• Automation Tools: Experience with Ansible FTD/FMC modules, FMC APIs, and custom scripts to scale firewall operations and reduce manual effort
• Enterprise Security: In-depth knowledge of Cisco firewall controls, secure access policies, physical/virtual FTD deployments, and encryption technologies
• VPN Solutions: Experience managing Cisco Secure Client/AnyConnect, site-to-site IPsec, and FTD remote-access VPNs using AES, TLS, and IPsec
• Monitoring & Incident Response: Experience with FMC monitoring, centralized syslog, Splunk/SIEM, and Cisco Secure platforms for traffic analysis, anomaly detection, alert investigation, and incident response
• Compliance & Governance: Strong understanding of cybersecurity compliance standards and regulatory requirements
• Technical Documentation: Ability to develop clear, concise, and accurate technical documentation and configuration records
• Analytical & Problem-Solving Skills: Strong analytical skills with the ability to troubleshoot complex security challenges and develop effective solutions
• Adaptability & Prioritization: Ability to perform effectively in high-pressure environments, prioritize competing demands, and adapt to changing requirements
• Communication: Strong written and verbal communication skills, with the ability to translate technical concepts for non-technical audiences

Responsibilities

• Design, deploy, and maintain Cisco FTD firewall architecture managed via FMC
• Support enterprise network segmentation and secure connectivity across on-premises infrastructures
• Participate in integrating Zero Trust frameworks within Cisco FTD and FMC security environments
• Policy development, centralized intrusion rules, and threat-intelligence integration on Cisco FMC
• Provide advanced operational support for troubleshooting and resolving Cisco FTD/FMC issues, handling complex technical and routing cases independently
• Document Cisco firewall technical procedures, SOPs, and lead compliance audits
• Collaborate with IT teams to implement and refine network security policies and procedures
• Assist in conducting security assessments and vulnerability scans on Cisco firewall and network infrastructure
• Must be willing to work shift work and/or on weekends if required

Skills

Cisco FTD/FMC administration

Network security

Python

PowerShell

TCP/IP networking

Education

High School Diploma

AS/AA degree

BS/BA degree

MS/MA degree

PhD

Tools

Ansible

FMC REST APIs

Cisco FMC

Splunk

Job description

Peraton is seeking a Network Engineer to support SITEC-3 EOM at MacDill AFB, Florida. The role involves designing, deploying, and maintaining Cisco FTD firewall architecture, ensuring secure network segmentation and 24x7 operations for USSOCOM networks.

You will implement Zero Trust integrations, develop SOPs, assist with audits, and collaborate with IT teams to enforce security policies. A DoD clearance and Cisco firewall expertise are required for this critical mission.