SITEC - Network Engineer (SDN) - MacDill AFB

Peraton; Florida; On-site; USD 130,000 - 170,000; Full time

Job summary

Peraton at MacDill AFB seeks a Network Engineer to design, deploy, and maintain secure enterprise networks in support of the SITEC-3 EOM program. You will lead implementation of advanced routing, security controls, and zero-trust policies across DoD networks, ensuring compliance with DoD STIGs and mission-critical data flows.

The role emphasizes endpoint compliance, network automation, and collaboration with cybersecurity and systems engineering teams to sustain 24x7 operations for USSOCOM

Qualifications

• DoW 8570 IAT II Certification and CCNP are required.
• DoW 8140 compliance under Work Role Code 441 – Network Operations Specialist.
• DoW TS/SCI clearance required.

Responsibilities

• Design, deploy, configure, and maintain enterprise network infrastructure across global environments.
• Engineer and sustain NAC and endpoint compliance architectures.
• Develop micro-segmentation and zero-trust strategies for data centers and multi-cloud environments.
• Perform advanced troubleshooting from OSI layer 2/3 to application policies.
• Collaborate with cyber and systems teams to ensure DoD STIG compliance.
• Maintain comprehensive network documentation and SOPs.
• Test and deploy emerging network technologies and security patches.
• Implement C2C architectures for endpoint compliance and automated remediation.

Skills

IAT II Certification

CCNP

Zero Trust

Tools

DoW 8570 IAT II Certification

Cisco Secure Workload

Job description

Required Qualifications:

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA


• DoW 8570 IAT II Certification AND CCNP


• Must be DoW 8140 compliant under the Work Role Code 441 – Network Operations Specialist - Intermediate level or higher.


• DoW TS/SCI clearance

Desired Qualifications:

• Previous experience operating within Department of War (DoW) or DoD enterprise network environments.


• Active, high-level vendor certifications such as Cisco Certified Network Professional (CCNP), or Cisco Certified Internetwork Expert (CCIE).


• Experience with Software-Defined Networking (SDN) and Software-Defined WAN (SD-WAN) solutions (e.g., Cisco ACI, Viptela).


• Familiarity with network automation and infrastructure-as-code scripting (e.g., Python, Ansible, REST APIs).

Peraton requires Software Defining Network Engineers to support the United States Special Operations Command Special Operations Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill Air Force Base.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), and deployed forces with Operations and Maintenance (O&M) services to maintain secure Network Operations (NetOps); sustain systems and network infrastructure; provide end-user and common device support; support configuration, change, license, and asset management; conduct training; and perform Install, Move, Add, Change (IMAC) services in support of globally distributed mission operations operating 24x7x365.

The Network Engineer will serve as a technical lead for the design, implementation, optimization, and maintenance of secure enterprise network infrastructure. Beyond traditional routing and switching, this role heavily focuses on advanced network security and Zero Trust enforcement. As a general focus area, the engineer will champion initiatives related to endpoint compliance, network access control (such as Comply to Connect / C2C frameworks), and application micro-segmentation (leveraging tools like Cisco Secure Workload / CSW). This role ensures rigorous dynamic security policies and secure application data flows across highly complex, mission-critical Department of War (DoW) networks.

• Design, deploy, configure, and maintain enterprise network infrastructure, including routers, switches, firewalls, and load balancers across globally distributed environments.


• Engineer and sustain network access control and endpoint compliance architectures, ensuring secure, policy-driven device authentication across the enterprise.


• Develop and integrate advanced micro-segmentation, application dependency mapping, and zero-trust workload protection strategies within data centers and multi-cloud environments.


• Perform advanced troubleshooting and root cause analysis for complex network performance and connectivity issues, spanning from OSI Layer 2/3 routing protocols (BGP, OSPF) to application-layer workload policies.


• Collaborate closely with cybersecurity and systems engineering teams to ensure network architectures comply with DoD STIGs and support secure, authorized data flows.


• Develop and maintain comprehensive network documentation, including architecture diagrams, data flow maps, and Standard Operating Procedures (SOPs).


• Evaluate and test emerging network technologies, firmware updates, and security patches prior to enterprise deployment.


• Deploy, configure, and maintain Cisco Secure Workload for application dependency mapping, micro-segmentation, and zero-trust policy enforcement across data centers and multi-cloud environments.


• Develop and maintain comprehensive network documentation, including architecture diagrams, data flow maps, and Standard Operating Procedures (SOPs).


• Implement Comply to Connect (C2C) architectures to enforce endpoint compliance, device profiling, network access control (NAC), and automated remediation.