Minimum Requirements:

Education & Experience Requirements (TESA):

- Bachelor’s degree in Computer Science, Cybersecurity, or related field and 8 years of relevant experience,ORAssociate’s Degree and 10 years relevant experience, ORHigh School Diploma and 12 years relevant experience.

Certifications (8140 DCWF Code 441):

- DCWF Code: 441

- Required Certifications:

- SecurityX / CASP+

- CCNP Security, CCSP, GCIA, GCED, GCIH

- AND ONE of the following:

- Network Firewall, IDS, F5-CA, F5-CTS, F5-CSE, BCCPA, CCNP Security, CCIE Security, Cisco CyberOps Professional

Hands-On Expertise:

- Minimum 8years designing and administering Cisco ASA or Firepower Firewall, Cisco ISE in large-scale environments.

- Experience with Cisco Firepower management platforms (FMC and FDM).

- Understanding of network security principles, including ACLs, NAT, and IPS/IDS.

- Deep understanding of 802.1X, RADIUS, TACACS+, TrustSec, Software-Defined Access.

- Familiarity with command-line interfaces (like TMSH), networking concepts and protocols, and security principles.

- Strong command of Cisco routing/switching, firewalls (ASA/FW-A), remote-access VPNs, IPS/IDS, F5 Big-IP, Blue Coat proxy.

- In-depth knowledge of F5 Big-IP platforms and technologies like LTM, GTM, and TMOS.

- Familiarity with PKI, certificate lifecycle management, and AAA integrations.

Soft Skills & Clearance:

- Demonstrated analytical, troubleshooting, and communication experience and capabilities.

- Ability to thrive in fast-paced, mission-critical settings.

- U.S. citizenship required.

- Active DoD Secret security clearance required.

We are seeking a highly skilled Network Security Firewall Engineer to join our team supporting the U.S.



Army Europe Regional Cyber Center (RCC-E). This role focuses on designing, implementing, and maintaining advanced network security solutions to ensure the integrity and availability of mission-critical systems.

Location:Wiesbaden, Germany(On-site at U.S. Army Europe Regional Cyber Center - RCC-E)

Key Responsibilities:

Cisco ASA & Firepower

- Lead design, implementation, and maintenance of Cisco Firepower infrastructure.

- Focus on threat prevention, intrusion detection/prevention, and policy management.

- Perform OS upgrades on Cisco ASA, FTD, and FMC platforms.

- Troubleshoot VPNs, policies, and connectivity issues related to FTD and FMC.

- Conduct security audits and performance tuning for high availability.

Cisco Identity Services Engine (ISE)

- Design, deploy, configure, and maintain ISE across the Army Top-Level Architecture (ATLA).

- Implement 802.1X authentication for wired and wireless users.

- Develop posture-assessment policies and TrustSec segmentation strategies.

- Configure and administer TACACS+ and RADIUS for AAA services.

- Integrate ISE with Active Directory, PKI, RAVPN, and other technologies.

- Provide Tier-3 support for identity and access incidents.

- Monitor ISE health and generate compliance reports.

F5 Load Balancers

- Design and implement F5 BIG-IP solutions including LTM and GTM.

- Configure virtual servers, pools, SNATs, and network settings.

- Perform firmware upgrades and configuration changes.

- Monitor traffic and troubleshoot F5-related performance issues.

Documentation & Collaboration

- Maintain architecture diagrams, runbooks, and SOPs.

- Participate in formal change-control processes.

- Collaborate with network, application, and security teams to integrate solutions.

#J-18808-Ljbffr

📌 Network Security Firewall Engineer (NAC) / Active Secret (San Felipe Jalapa de Díaz)
🏢 Peraton
📍 San Felipe Jalapa de Díaz