SITEC - Network Security Administrator - MacDill AFB with Security Clearance

About Peraton Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we're keeping people around the world safe and secure. Program Overview Peraton provides USSOCOM, its Component Commands, Theater Special Operations Commands (TSOCs), deployed forces, CIO/J6, and end-users with high-quality IT platform and network services over an eight-year period. About The Role Peraton requires a Senior Network Security Administrator to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position is located at MacDill AFB in Florida. The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. A Senior Network Security Administrator is responsible for the day-to-day administration, complex configuration, optimization, and lifecycle support of the organization's network security infrastructure. The Senior Administrator ensures maximum availability, defense-in-depth posture, and configuration integrity of security appliances and software protecting our networks from advanced internal and external threats. This role requires an advanced, comprehensive technical foundation in systems administration, network protocols, and the deployment of enterprise security tools, and focuses on managing complex configurations, executing high-risk changes, and resolving difficult operational and diagnostic issues. This position collaborates closely with network engineers, security operations, and compliance officers to maintain a resilient network posture. The Senior Administrator possesses expert-level knowledge of Government hardware, software, and established baselines to ensure all tools are configured and maintained in strict alignment with authorized technical plans. * Daily Operations & Monitoring: Perform daily administration, monitoring, and proactive health checks of network security infrastructure, including firewalls, Intrusion Detection/Prevention Systems (IDS/IPS), Virtual Private Networks (VPNs), and web/email security gateways.
* Equipment Configuration: Install, configure, and maintain network security appliances and software in strict alignment with established technical plans and organizational designs.
* System Patching & Hardening: Apply security patches, updates, and firmware upgrades, ensuring all systems are hardened in compliance with government standards and security baselines (e.g., DISA STIGs).
* Troubleshooting & Diagnostics: Apply advanced diagnostic, analytical, and troubleshooting skills to rapidly isolate and resolve complex network and security hardware/software malfunctions to minimize operational downtime.
* Baseline Management: Maintain configuration control of all security appliances, ensuring any changes are properly documented and aligned with authorized baseline configurations.
* Collaborative Defense: Partner closely with internal IT teams, Security Operations Centers (SOC), and system stakeholders to coordinate defense-in-depth measures and assist with incident response actions.
* Technical Documentation: Create, update, and maintain comprehensive network topology diagrams, configuration logs, asset inventories, and standard operating procedures (SOPs).
* Vulnerability Remediation: Identify security vulnerabilities within the network infrastructure and execute targeted remediation actions to eliminate risks.
* Monitor security advisory groups to ensure all necessary network security updates, patches, and preventive measure are in place.
* Utilize network monitoring tools to track user activity, network traffic, and potential security threats.
* Maintain baseline behavior patterns to help identify anomalies indicative of security breaches.
* Manage, monitor, and update malware prevention systems.
* Maintain procedures for responding to security incidents related to web traffic, such as malware infections or data breaches
* Utilize built-in analytics tools to monitor web traffic patterns, bandwidth usage, and user behavior.
* Manage content filtering policies to restrict access to inappropriate or non-work-related sites.
Qualifications Required Qualifications: * Min 12 years with HS degree, 10 years with AS/AA degree, 8 years with BS/BA, 6 years with MS/MA, 3 years wiith PhD
* DoD 8570 IAT II Certification; AND
* CCNA
* DoD TS/SCI clearanceDesired Qualifications: * Must be with DoW 8140 compliant under the Work Role Code 521- Cyber Defense Infrastructure Support Specialist - Intermediate level or higher by 1 Oct 26.
* Cisco Firepower Deployment: Hands-on experience configuring, patching, and tuning Cisco Firepower Threat Defense (FTD) firewalls and managing policies via the Firepower Management Center (FMC).
* DoD Comply-to-Connect (C2C): Proficiency in administering C2C frameworks (using tools like Forescout CounterACT or Cisco ISE) to enforce automated device discovery, endpoint compliance, and network access control.
* Secure Email Gateway (SEG) Defense: Technical capability to operate and maintain Cisco SEG (formerly ESA) to protect email infrastructure against phishing, spam, and unauthorized data leakage (DLP)
* Behavioral Threat Analytics (CSNA): Hands-on experience operating Cisco Secure Network Analytics (Stealthwatch).
Details Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual's experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits. Application Statements: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates. By applying to this job, you are expressing interest in the role and the Company. During the review of your application, you may be required to participate in an on-camera interview, as well as participate in a process to verify your identity. EEO:Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.