SITEC - Cyber Security Engineer (ESS) - MacDill AFB

Peraton•Tampa, FL

8d•$104,000 - $166,000•Onsite

About The Position

Peraton requires Cyber Security Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill AFB in Florida. The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. The Cyber Systems Engineer will serve as a technical expert responsible for the engineering, integration, and maintenance of a comprehensive, multi-layered endpoint security architecture. Engineer and integrate enterprise endpoint security platforms (EPP, EDR, Host IPS, Application Control) to directly satisfy DoD Zero Trust framework requirements. Focus on automating device posture assessment, endpoint-driven micro-segmentation, application telemetry, and threat detection. Responsible for designing and deploying infrastructure across Department of War (DoW) networks to ensure continuous device compliance and alignment with mandated Zero Trust execution activities.

Requirements

Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA
DoD 8570 IAT II Certification
DoD TS/SCI clearance
Must be 8140 compliant by 1 oct 2026.

Nice To Haves

Broad general experience deploying, administering, and migrating between various commercial endpoint security products (e.g., Trellix, Symantec, CrowdStrike, SentinelOne, Carbon Black).
Experience managing and securing endpoints across diverse enterprise operating systems, including Windows, macOS, and Linux distributions.
Familiarity with digital forensics and incident response (DFIR) methodologies, specifically regarding remote endpoint data collection and analysis.
Experience utilizing endpoint configuration management tools (e.g., MECM/Intune, Ansible, Tanium) to enforce software baselines and continuous compliance.
General knowledge of malware behavior, threat intelligence integration, and translating indicators of compromise (IoCs) into endpoint blocking rules.

Responsibilities

Engineer solutions for comprehensive device discovery, vulnerability patching, and continuous compliance posture assessments
Deploy advanced EDR/XDR capabilities to continuously monitor, detect, and automatically respond to endpoint threats
Integrate host-based firewalls and ZTNA agents to enable network data flow mapping, host-level micro-segmentation, and Software Defined Perimeters
Design and enforce strict application whitelisting and continuous application telemetry monitoring to ensure only authorized workloads execute on endpoints
Develop custom scripts (PowerShell, Python) to automate agent health checks, forced remediations, and Zero Trust policy enforcement on diverse operating systems.
Create authoritative system design documents that explicitly map endpoint engineering configurations to DoD Zero Trust capability requirements.
Engineer telemetry pipelines to reliably route endpoint logs, behavioral alerts, and compliance state data to centralized SIEMs and Zero Trust policy engines.
Conduct rigorous interoperability testing between multiple endpoint security agents to prevent system conflicts, kernel panics, and resource exhaustion.