Network Security Firewall Engineer (NAC) / Active Secret

Minimum Requirements:

Education & Experience Requirements (TESA):

• Bachelor’s degree in Computer Science, Cybersecurity, or related field and 8 years of relevant experience,ORAssociate’s Degree and 10 years relevant experience, ORHigh School Diploma and 12 years relevant experience.

Certifications (8140 DCWF Code 441):

• DCWF Code: 441
• Required Certifications:
  • SecurityX / CASP+
  • CCNP Security, CCSP, GCIA, GCED, GCIH
  • AND ONE of the following:
    • Network Firewall, IDS, F5-CA, F5-CTS, F5-CSE, BCCPA, CCNP Security, CCIE Security, Cisco CyberOps Professional

Hands-On Expertise:

• Minimum 8years designing and administering Cisco ASA or Firepower Firewall, Cisco ISE in large-scale environments.
• Experience with Cisco Firepower management platforms (FMC and FDM).
• Understanding of network security principles, including ACLs, NAT, and IPS/IDS.
• Deep understanding of 802.1X, RADIUS, TACACS+, TrustSec, Software-Defined Access.
• Familiarity with command-line interfaces (like TMSH), networking concepts and protocols, and security principles.
• Strong command of Cisco routing/switching, firewalls (ASA/FW-A), remote-access VPNs, IPS/IDS, F5 Big-IP, Blue Coat proxy.
• In-depth knowledge of F5 Big-IP platforms and technologies like LTM, GTM, and TMOS.
• Familiarity with PKI, certificate lifecycle management, and AAA integrations.

Soft Skills & Clearance:

• Demonstrated analytical, troubleshooting, and communication experience and capabilities.
• Ability to thrive in fast-paced, mission-critical settings.
• U.S. citizenship required.
• Active DoD Secret security clearance required.

We are seeking a highly skilled Network Security Firewall Engineer to join our team supporting the U.S. Army Europe Regional Cyber Center (RCC-E). This role focuses on designing, implementing, and maintaining advanced network security solutions to ensure the integrity and availability of mission-critical systems.

Location:Wiesbaden, Germany(On-site at U.S. Army Europe Regional Cyber Center - RCC-E)

Key Responsibilities:Cisco ASA & Firepower

• Lead design, implementation, and maintenance of Cisco Firepower infrastructure.
• Focus on threat prevention, intrusion detection/prevention, and policy management.
• Perform OS upgrades on Cisco ASA, FTD, and FMC platforms.
• Troubleshoot VPNs, policies, and connectivity issues related to FTD and FMC.
• Conduct security audits and performance tuning for high availability.

Cisco Identity Services Engine (ISE)

• Design, deploy, configure, and maintain ISE across the Army Top-Level Architecture (ATLA).
• Implement 802.1X authentication for wired and wireless users.
• Develop posture-assessment policies and TrustSec segmentation strategies.
• Configure and administer TACACS+ and RADIUS for AAA services.
• Integrate ISE with Active Directory, PKI, RAVPN, and other technologies.
• Provide Tier-3 support for identity and access incidents.
• Monitor ISE health and generate compliance reports.

F5 Load Balancers

• Design and implement F5 BIG-IP solutions including LTM and GTM.
• Configure virtual servers, pools, SNATs, and network settings.
• Perform firmware upgrades and configuration changes.
• Monitor traffic and troubleshoot F5-related performance issues.

Documentation & Collaboration

• Maintain architecture diagrams, runbooks, and SOPs.
• Participate in formal change-control processes.
• Collaborate with network, application, and security teams to integrate solutions.