Job Description

Program Overview

About The Role

Peraton is currently seeking an experienced Network Security Identity Engineer to join our team in Wiesbaden, Germany.

Location: Wiesbaden, Germany; On-site. 

In this role, as the Network Security Identity Engineer, you will be joining and working with the U.S. Army Europe Regional Cyber Center (RCC-E). 

You will perform: 

• Cisco ISE Platform Management: Design, deploy, configure, and maintain the Cisco Identity Services Engine (ISE) solution across a continent-wide Army Top-Level Architecture (ATLA) network.
• Network Access Control: Implement and enforce 802.1X authentication for wired and wireless users; develop posture-assessment policies and TrustSec segmentation strategies.
• AAA Services Administration: Configure and administer TACACS+ and RADIUS services for device authentication and authorization.
• Systems Integration: Integrate ISE with Active Directory, PKI/certificate authorities, RAVPN, and other technologies
• Operational Support & Troubleshooting: Provide Tier-3 technical support for identity and access incidents; troubleshoot complex authentication/authorization failures.
• Monitoring & Reporting: Use enterprise tools to monitor ISE health, generate detailed security-audit/compliance reports, and deliver operational intelligence to stakeholders.
• Documentation & Change Management: Maintain up-to-date architecture diagrams, runbooks, and standard operating procedures; participate in formal change-control processes.
• Collaboration & Training: Work closely with network operations personnel to resolve anomalies, share best practices, and train junior engineers on ISE essentials.

#RCC-E

Qualifications

Minimum Requirements: : 

TESA Experience Requirements:

• Bachelor’s in Computer Science, Cybersecurity, or related field and 8 years of relevant experience, or an Associate’s and 10+ years’ relevant experience, CASP+ certification, or HS and 12+ years’ relevant experience.

Education & Experience (8140 DCWF Code 441):

• Certifications:

  • DCWF: 441 - B.S. or CASP+, CCNP Security, CCSP, GCIA, GCED, GCIH, AND ONE of the following:

  • Network Firewall, IDS, F5-CA, F5-CTS, F5-CSE, BCCPA, CCNA, CCNP Security, CCIE Security, Cisco CyberOps Professional. 

• Hands-On Expertise:

  • Minimum of 5 years designing and administering Cisco ISE in large-scale environments.

  • Deep understanding of 802.1X, RADIUS, TACACS+, TrustSec, Software-Defined Access.

  • Strong command of Cisco routing/switching, firewalls (ASA/FW-A), remote-access VPNs, IPS/IDS, F5 Big-IP, Blue Coat proxy.

  • Familiarity with PKI, certificate lifecycle management, and AAA integrations.

• Soft Skills & Clearance:

  • Demonstrated analytical, troubleshooting, and communication experience and capabilities.

  • Demonstrated ability to thrive in fast-paced, mission-critical settings.

  • U.S. citizenship required. 

  • Active DoD Secret security clearance.

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Job Tags

Similar Jobs