The Network Security Engineer will serve as the primary technical authority for the design, implementation, and management of the enterprise network security boundary, with a dedicated focus on Next-Generation Firewalls (NGFW) and Intrusion Prevention Systems (IPS). Operating at the critical intersection of network operations and cybersecurity, this role specializes in engineering, configuring, and optimizing Cisco Firewall Management Center (FMC) and Firewalls Threat Defense (FTD) to enforce robust security postures. The engineer will collaborate closely with Network Infrastructure teams and the Zero Trust (ZT) working group to translate high-level security architectures into concrete firewall rules, micro-segmentation boundaries, and threat prevention policies. This role ensures that active defense measures, secure data flows, and rigorous policy enforcement are seamlessly integrated across highly complex, mission-critical networks.
Engineer and Administer Cisco NGFW Infrastructure: Lead the deployment, configuration, and continuous optimization of Cisco Firepower Threat Defense (FTD) firewalls and Firewall Management Center (FMC) platforms across the enterprise.
Zero Trust Policy Enforcement: Partner with the Zero Trust (ZT) team to translate architectural blueprints into actionable access control lists (ACLs), security zones, and micro-segmentation policies within the firewall infrastructure.
IPS/IDS and Policy Optimization: Design, deploy, and tune Intrusion Prevention and Detection System (IPS/IDS) policies, SSL/TLS decryption rules, and URL filtering within Cisco FMC to block advanced threats while maintaining operational network performance.
Network Engineer Collaboration: Provide technical escort and security review for Network Engineers; ensure all routing, switching, and transport changes conform to established network security boundaries and security policies.
Rule Lifecycle & STIG Compliance: Establish and maintain a rigorous firewall rule-review process, eliminating stale or redundant rules while ensuring all configurations strictly comply with Department of Defense (DoD) STIGs and security directives.
Incident Response and Threat Mitigation: Collaborate with the SOC to rapidly deploy emergency block-lists, quarantine policies, and custom intrusion signatures in response to active network-based cyber events.
Adhere strictly to formal change control processes and configuration management standards. Maintain precise, version-controlled records of all firewall rule modifications, security policy changes, and architectural adjustments, ensuring all actions are fully documented and approved prior to implementation.
Execute tasks as a joint member of the enterprise engineering teams providing expert guidance for network secure by design principals.
Qualifications
Required Qualifications
Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years with PhD
A DoW TS/SCI clearance is required
DOD 8570 IAT II Certification AND CCNA; AND
Must be with DoW 8140 compliant under the Work Role Code 521– Cyber Defense Infrastructure Support Specialist - Intermediate level or higher.
Desired Qualifications
Previous experience operating within Department of War (DoW) or DoD enterprise network environments.
Active, high-level vendor certifications such as Cisco Certified Network Professional (CCNP), or Cisco Certified Internetwork Expert (CCIE).
Experience with Software-Defined Networking (SDN) and Software-Defined WAN (SD-WAN) solutions (e.g., Cisco ACI, Viptela).
Familiarity with network automation and infrastructure-as-code scripting (e.g., Python, Ansible, REST APIs).
Experience working on or with a Security Operations Center (SOC)
Target Salary Range $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
Benefits Statement
Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
Application Statements The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. Use of artificial intelligence (AI) tools of any kind during Peraton interviews is strictly prohibited unless the candidate has obtained prior written authorization. All interview responses must be the candidate’s own.
- EEO
- EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.
