SITEC - Firewall Network Engineer - MacDill AFB

Peraton•MacDill AFB, FL

1d•Onsite

About The Position

Peraton is hiring a senior Cisco Firewall Network Engineer to support the Special Operations Command Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order at MacDill Air Force Base in Florida. The task order provides USSOCOM, its Component Commands, Theater Special Operations Commands, and deployed forces with operations and maintenance services for network operations, systems and network infrastructure, end-user and common-device support, configuration and asset management, training, and install, move, add, and change services. The Network Engineer – Cisco Firewall Senior Specialist designs, implements, and maintains Cisco Firepower Threat Defense (FTD) and Firepower Management Center (FMC) firewall solutions across USSOCOM enterprise networks. The role supports secure network segmentation and connectivity, contributes to integrating Zero Trust frameworks, manages large-scale FMC configurations, and provides advanced operational support with minimal supervision. The specialist leads complex troubleshooting, technical documentation, and compliance work, mentors junior staff, and provides strategic guidance on network security architecture. The position may require shift work and/or weekend work. The stated target salary range is $104,000–$166,000. Employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay, depending on the position. Salary is determined by factors including responsibilities, experience, education, skills, geographic location, and business and contract considerations.

Requirements

At least 12 years of experience with a high school diploma, 10 years with an associate degree, 8 years with a bachelor's degree, 6 years with a master's degree, or 3 years with a Ph.D.
DoW TS/SCI clearance.
DoW 8140 compliance under Work Role Code 441 – Network Operations Specialist, Intermediate level or higher.
DoD 8570 IAT II certification and CCNP.
Extensive experience configuring and managing Cisco FTD/FMC, including ACP, Snort/IPS, AMP/malware policies, SSL decryption, and complex security troubleshooting.
Proficiency with Python, PowerShell, and Cisco FMC REST APIs for automating policies, rules, and system updates.
Experience with Ansible FTD/FMC modules, FMC APIs, and custom scripts to scale firewall operations and reduce manual effort.
In-depth knowledge of Cisco firewall controls, secure access policies, physical and virtual FTD deployments, and encryption technologies.
Experience managing Cisco Secure Client/AnyConnect, site-to-site IPsec, and FTD remote-access VPNs using AES, TLS, and IPsec.
Experience with FMC monitoring, centralized syslog, Splunk/SIEM, and Cisco Secure platforms for traffic analysis, anomaly detection, alert investigation, and incident response.
Strong understanding of cybersecurity compliance standards and regulatory requirements.
Ability to develop clear, concise, accurate technical documentation and configuration records.
Strong analytical skills and ability to troubleshoot complex security challenges and develop effective solutions.
Ability to work effectively in high-pressure environments, prioritize competing demands, and adapt to changing requirements.
Strong written and verbal communication skills, including the ability to explain technical concepts to non-technical audiences.

Nice To Haves

Cisco Certified Network Professional (CCNP) Security.
Cisco Certified Specialist – Network Security Firepower (300-710 SNCF).
Cisco Certified Internetwork Expert (CCIE) Security.

Responsibilities

Design, deploy, and maintain Cisco FTD firewall architecture managed centrally through FMC.
Support enterprise network segmentation and secure connectivity across on-premises infrastructure.
Participate in integrating Zero Trust frameworks into Cisco FTD and FMC security environments.
Develop policies, centralized intrusion rules, and threat-intelligence integrations in Cisco FMC.
Provide advanced operational support and independently troubleshoot and resolve Cisco FTD/FMC issues, including complex technical and routing cases.
Document Cisco firewall procedures and standard operating procedures, and lead compliance audits.
Collaborate with IT teams to implement and refine network security policies and procedures.
Assist with security assessments and vulnerability scans of Cisco firewalls and network infrastructure.
Mentor junior staff and provide strategic guidance for network security architecture.
Work shifts and/or weekends if required.