ISE Network Engineer - Top Secret Clearance (SCI Eligible)

JFL Consulting LLC • Washington, DC

just now • Onsite

About The Position

We are seeking an experienced ISE Network Engineer with 8+ years of hands-on experience in enterprise network infrastructure, with deep expertise in Cisco Identity Services Engine (ISE) and Cisco DNA Center (DNAC). The ideal candidate will collaborate to design, implement, secure, and automate complex network environments in a DoD environment.

Requirements

• 8+ years of hands-on network engineering experience in enterprise or government environments
• Strong understanding of TCP/IP, IPv4, routing, switching, and network troubleshooting
• Proven experience with Cisco and/or Juniper network devices
• Hands-on experience configuring and administering Cisco ISE
• Experience supporting Juniper SRX firewalls and Cisco Firepower (FMC-managed)
• Strong understanding of firewall policies, security zones, and traffic inspection
• Familiarity with DoD STIGs and operating in compliance-driven environments
• CCNA, CCNP, JNCIS, or JNCIP certification (active or previously held)
• DoD 8570 IAT Level II certification (Security+ or equivalent)
• Top Secret Clearance (SCI Eligible)

Nice To Haves

• Experience integrating Cisco ISE with 802.1X, TACACS+, or network access control workflows
• Exposure to advanced firewall features such as IDS/IPS, URL filtering, or application-layer inspection
• Familiarity with vulnerability scanning tools (e.g., Nessus)
• Basic scripting or automation exposure (PowerShell, Ansible, etc.)

Responsibilities

• Design, implement, and sustain enterprise network infrastructures supporting high availability and mission operations
• Serve as a senior technical resource for network troubleshooting, outage resolution, and performance optimization
• Perform root-cause analysis on complex network issues and drive permanent fixes
• Configure, maintain, and troubleshoot Cisco and Juniper routing and switching platforms
• Configure, administer, and troubleshoot Cisco Identity Services Engine (ISE), including policy sets and authentication/authorization workflows
• Configure and support next-generation firewalls, including Juniper SRX and Cisco Firepower platforms
• Support firewall rule management, policy validation, and traffic-flow troubleshooting across secured boundaries
• Maintain accurate technical documentation, diagrams, and standard operating procedures
• Participate in planning and implementation of network upgrades and architectural improvements
• Ensure compliance with DoD security and configuration standards

Benefits

• Free on-site parking in Washington, DC
• 100% employer-paid medical, dental, and vision for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed