Network Security Firewall Engineer (NAC) / Active Secret

Minimum Requirements

Education & Experience Requirements (TESA)

• Bachelor’s degree in Computer Science, Cybersecurity, or related field and 8 years of relevant experience, ORAssociate’s Degree and 10 years relevant experience, ORHigh School Diploma and 12 years relevant experience.

Certifications (8140 DCWF Code 441)

• DCWF Code: 441

• Required Certifications

• Security X / CASP+
• CCNP Security, CCSP, GCIA, GCED, GCIH

• AND ONE of the following

• Network Firewall, IDS, F5-CA, F5-CTS, F5-CSE, BCCPA, CCNP Security, CCIE Security, Cisco Cyber Ops Professional

Hands-On Expertise

• Minimum 8years designing and administering Cisco ASA or Firepower Firewall, Cisco ISE in large-scale environments.
• Experience with Cisco Firepower management platforms (FMC and FDM).
• Understanding of network security principles, including ACLs, NAT, and IPS/IDS.
• Deep understanding of 802.1X, RADIUS, TACACS+, Trust Sec, Software-Defined Access.
• Familiarity with command-line interfaces (like TMSH), networking concepts and protocols, and security principles.
• Strong command of Cisco routing/switching, firewalls (ASA/FW-A), remote-access VPNs, IPS/IDS, F5 Big-IP, Blue Coat proxy.
• In-depth knowledge of F5 Big-IP platforms and technologies like LTM, GTM, and TMOS.
• Familiarity with PKI, certificate lifecycle management, and AAA integrations.

Soft Skills & Clearance

• Demonstrated analytical, troubleshooting, and communication experience and capabilities.
• Ability to thrive in fast-paced, mission-critical settings.
• U. S. citizenship required.
• Active Do D Secret security clearance required.

We are seeking a highly skilled Network Security Firewall Engineer to join our team supporting the U.

Army Europe Regional Cyber Center (RCC-E).

This role focuses on designing, implementing, and maintaining advanced network security solutions to ensure the integrity and availability of mission-critical systems.

Location: Wiesbaden, Germany(On-site at U. S. Army Europe Regional Cyber Center - RCC-E)

Key Responsibilities: Cisco ASA & Firepower

• Lead design, implementation, and maintenance of Cisco Firepower infrastructure.
• Focus on threat prevention, intrusion detection/prevention, and policy management.
• Perform OS upgrades on Cisco ASA, FTD, and FMC platforms.
• Troubleshoot VPNs, policies, and connectivity issues related to FTD and FMC.
• Conduct security audits and performance tuning for high availability.
• Cisco Identity Services Engine (ISE)
• Design, deploy, configure, and maintain ISE across the Army Top-Level Architecture (ATLA).
• Implement 802.1X authentication for wired and wireless users.
• Develop posture-assessment policies and Trust Sec segmentation strategies.
• Configure and administer TACACS+ and RADIUS for AAA services.
• Integrate ISE with Active Directory, PKI, RAVPN, and other technologies.
• Provide Tier-3 support for identity and access incidents.
• Monitor ISE health and generate compliance reports.
• F5 Load Balancers
• Design and implement F5 BIG-IP solutions including LTM and GTM.
• Configure virtual servers, pools, SNATs, and network settings.
• Perform firmware upgrades and configuration changes.
• Monitor traffic and troubleshoot F5-related performance issues.
• Documentation & Collaboration
• Maintain architecture diagrams, runbooks, and SOPs.
• Participate in formal change-control processes.
• Collaborate with network, application, and security teams to integrate solutions.
• #J-18808-Ljbffr