SITEC - Network Engineer (SDN) - MacDill AFB

Required Qualifications:

• Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA
• Must be DoW 8140 compliant under the Work Role Code 441 – Network Operations Specialist - Intermediate level or higher. 
• DoD 8570 IAT II Certification AND CCNP
• DoW TS/SCI clearance 

Desired Qualifications:

• Previous experience operating within Department of War (DoW) or DoD enterprise network environments.
• Active, high-level vendor certifications such as Cisco Certified Network Professional (CCNP), or Cisco Certified Internetwork Expert (CCIE).
• Experience with Software-Defined Networking (SDN) and Software-Defined WAN (SD-WAN) solutions (e.g., Cisco ACI, Viptela).
• Familiarity with network automation and infrastructure-as-code scripting (e.g., Python, Ansible, REST APIs).

Peraton requires Software Defining Network Engineers to support the United States Special Operations Command Special Operations Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill Air Force Base.

The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), and deployed forces with Operations and Maintenance (O&M) services to maintain secure Network Operations (NetOps); sustain systems and network infrastructure; provide end-user and common device support; support configuration, change, license, and asset management; conduct training; and perform Install, Move, Add, Change (IMAC) services in support of globally distributed mission operations operating 24x7x365.

The Network Engineer will serve as a technical lead for the design, implementation, optimization, and maintenance of secure enterprise network infrastructure. Beyond traditional routing and switching, this role heavily focuses on advanced network security and Zero Trust enforcement. As a general focus area, the engineer will champion initiatives related to endpoint compliance, network access control (such as Comply to Connect / C2C frameworks), and application micro-segmentation (leveraging tools like Cisco Secure Workload / CSW). This role ensures rigorous dynamic security policies and secure application data flows across highly complex, mission-critical Department of War (DoW) networks.

• Design, deploy, configure, and maintain enterprise network infrastructure, including routers, switches, firewalls, and load balancers across globally distributed environments.
• Engineer and sustain network access control and endpoint compliance architectures, ensuring secure, policy-driven device authentication across the enterprise.
• Develop and integrate advanced micro-segmentation, application dependency mapping, and zero-trust workload protection strategies within data centers and multi-cloud environments.
• Perform advanced troubleshooting and root cause analysis for complex network performance and connectivity issues, spanning from OSI Layer 2/3 routing protocols (BGP, OSPF) to application-layer workload policies.
• Collaborate closely with cybersecurity and systems engineering teams to ensure network architectures comply with DoD STIGs and support secure, authorized data flows.
• Develop and maintain comprehensive network documentation, including architecture diagrams, data flow maps, and Standard Operating Procedures (SOPs).
• Evaluate and test emerging network technologies, firmware updates, and security patches prior to enterprise deployment.
• Deploy, configure, and maintain Cisco Secure Workload for application dependency mapping, micro-segmentation, and zero-trust policy enforcement across data centers and multi-cloud environments.
• Develop and maintain comprehensive network documentation, including architecture diagrams, data flow maps, and Standard Operating Procedures (SOPs).
• Implement Comply to Connect (C2C) architectures to enforce endpoint compliance, device profiling, network access control (NAC), and automated remediation.