SITEC - Network Security Engineer - MacDill AFB

Peraton; Tampa (FL); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Network Security Engineer at MacDill AFB in Florida to design, implement, and manage the enterprise security boundary with a focus on Cisco NGFW and FMC. You will translate high-level security architectures into concrete firewall rules and micro-segmentation to protect critical networks.

Working with the Zero Trust team, Network Infrastructure, and the SOC, you will ensure TLS decryption, URL filtering, and IPS/IDS policies are tuned for performance while maintaining DoD

Qualifications

• DoD 8570 IAT II Certification and CCNA are required.

Responsibilities

• Design, deploy, and optimize Cisco NGFW infrastructure including FTD and FMC.
• Implement Zero Trust policies, ACLs, and micro-segmentation within firewall.
• Design, tune IPS/IDS policies, SSL/TLS decryption, and URL filtering.
• Ensure changes follow DoD STIGs and formal change control processes.
• Collaborate with SOC and Network Engineers to enforce security boundaries.

Skills

DoD 8570 IAT II

CCNA

Security policy

Firewall management

Collaboration with SOC

Education

HS degree

AS/AA degree

BS/BA

MS/MA

PhD

Tools

CCNP

CCIE

SDN

SD-WAN

Job description

Responsibilities

Peraton requires Network Security Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill AFB in Florida.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365.

The Network Security Engineer will serve as the primary technical authority for the design, implementation, and management of the enterprise network security boundary, with a dedicated focus on Next-Generation Firewalls (NGFW) and Intrusion Prevention Systems (IPS). Operating at the critical intersection of network operations and cybersecurity, this role specializes in engineering, configuring, and optimizing Cisco Firewall Management Center (FMC) and Firewalls Threat Defense (FTD) to enforce robust security postures. The engineer will collaborate closely with Network Infrastructure teams and the Zero Trust (ZT) working group to translate high-level security architectures into concrete firewall rules, micro-segmentation boundaries, and threat prevention policies. This role ensures that active defense measures, secure data flows, and rigorous policy enforcement are seamlessly integrated across highly complex, mission-critical networks.

• Engineer and Administer Cisco NGFW Infrastructure:Lead the deployment, configuration, and continuous optimization of Cisco Firepower Threat Defense (FTD) firewalls and Firewall Management Center (FMC) platforms across the enterprise.
• Zero Trust Policy Enforcement: Partner with the Zero Trust (ZT) team to translate architectural blueprints into actionable access control lists (ACLs), security zones, and micro-segmentation policies within the firewall infrastructure.
• IPS/IDS and Policy Optimization:Design, deploy, and tune Intrusion Prevention and Detection System (IPS/IDS) policies, SSL/TLS decryption rules, and URL filtering within Cisco FMC to block advanced threats while maintaining operational network performance.
• Network Engineer Collaboration:Provide technical escort and security review for Network Engineers; ensure all routing, switching, and transport changes conform to established network security boundaries and security policies.
• Rule Lifecycle & STIG Compliance:Establish and maintain a rigorous firewall rule-review process, eliminating stale or redundant rules while ensuring all configurations strictly comply with Department of Defense (DoD) STIGs and security directives.
• Incident Response and Threat Mitigation:Collaborate with the SOC to rapidly deploy emergency block-lists, quarantine policies, and custom intrusion signatures in response to active network-based cyber events.
• Adhere strictly to formal change control processes and configuration management standards. Maintain precise, version-controlled records of all firewall rule modifications, security policy changes, and architectural adjustments, ensuring all actions are fully documented and approved prior to implementation.
• Execute tasks as a joint member of the enterprise engineering teams providing expert guidance for network secure by design principals.

Qualifications

Required Qualifications:

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
• A DoW TS/SCI clearance is required
• DOD 8570 IAT II Certification AND CCNA; AND
• Must be with DoW 8140 compliant under the Work Role Code 521– Cyber Defense Infrastructure Support Specialist - Intermediate level or higher.

Desired Qualifications:

• Previous experience operating within Department of War (DoW) or DoD enterprise network environments.
• Active, high-level vendor certifications such as Cisco Certified Network Professional (CCNP), or Cisco Certified Internetwork Expert (CCIE).
• Experience with Software-Defined Networking (SDN) and Software-Defined WAN (SD-WAN) solutions (e.g., Cisco ACI, Viptela).
• Familiarity with network automation and infrastructure-as-code scripting (e.g., Python, Ansible, REST APIs).
• Experience working on or with a Security Operations Center (SOC)

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.