Network Engineer, Lead - Cisco ISE / Firepower

AMERICAN SYSTEMS
Washington, DC, United States
3 days ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Working hours
Regular working hours

Tech stack

IEEE 802.1X User Authentication Cisco Routers Cyber Security Subnetting Virtual Private Networks (VPN) Network Security Network Layer Network Architecture Network Diagrams Routing SAP (Applications)
+9 more
Virtual Local Area Networks Network Routers Authentication Authorization Accounting (Server Program) Computer Networking Systems Identity Services Engine Network Access Control Firewalls (Computer Science) Firepower Cisco

Job description

Experteer Overview In this role you lead secure network engineering to support critical national security missions in a highly classified setting. You will work closely with cross-functional cybersecurity and mission teams to design, implement, and maintain resilient network infrastructure. You’ll tackle complex security challenges and drive improvements in performance, security, and reliability. This is a hands-on, impact-focused position at a respected defense contractor. Compensation / Benefits * Lead secure network engineering and operational support in a highly classified environment * Configure, administer, and troubleshoot Cisco ISE for authentication, authorization, accounting, network access control, and policy enforcement * Administer and optimize Cisco Firepower and FMC, including policy administration, rule management, and troubleshooting * Design, implement, and maintain secure network infrastructure (routers, switches, firewalls, VLANs, ACLs, VPNs, segmentation) * Troubleshoot Layer 2/Layer 3, firewall, authentication, and access control issues * Support AAA, 802.1X, VPN, RMF, STIG, and secure configuration requirements * Develop and maintain network diagrams, implementation plans, SOPs, and technical documentation * Partner with cybersecurity, systems administration, and mission teams to deliver secure, resilient infrastructure solutions * Support incident response, outage resolution, root cause analysis, and network remediation efforts * Recommend improvements to strengthen network performance, security, and reliability Tasks * U.S. citizenship required * Active TS/SCI clearance required with SAP eligibility * Bachelor’s degree in a related technical field, or additional relevant experience in lieu of a degree * 8+ years of network engineering experience in enterprise, defense, intelligence, or other highly regulated environments * Strong experience with Cisco ISE and Cisco Firepower/FMC * Experience supporting AAA, 802.1X, VPN, RMF, and STIG requirements * Active DoD 8140/8570 IAT II certification required (e.g., Security+ CE, CySA+, SSCP) * Strong knowledge of Layer 2/Layer 3 networking, routing, switching, VLANs, ACLs, subnetting, and segmentation * Experience troubleshooting Cisco routers, switches, firewalls, and enterprise networks * Ability to work independently and solve complex technical problems * Strong written and verbal communication skills Key requirements * healthcare benefits * paid leave * retirement plans * insurance programs * education and training assistance

Requirements

FULL_TIME Layer 2/Layer 3, firewall, authentication, and access control issues * Support AAA, 802.1X, VPN, RMF, STIG, and secure configuration requirements * Develop and maintain network diagrams, implementation plans, SOPs, and technical documentation * Partner with cybersecurity, systems administration, and mission teams to deliver secure, resilient infrastructure solutions * Support incident response, outage resolution, root cause analysis, and network remediation efforts * Recommend improvements to strengthen network performance, security, and reliability Tasks * U.S. citizenship required * Active TS/SCI clearance required with SAP eligibility * Bachelor’s degree in a related technical field, or additional relevant experience in lieu of a degree * 8+ years of network engineering experience in enterprise, defense, intelligence, or other highly regulated environments * Strong experience with Cisco ISE and Cisco Firepower/FMC * Experience supporting AAA, 802.1X, VPN, RMF, and STIG aaaa Benefits * Active DoD 8140/8570 IAT II certification required (e.g., Security+ CE, CySA+, SSCP) * Strong knowledge of Layer 2/Layer 3 networking, routing, switching, VLANs, ACLs, subnetting, and segmentation * Experience troubleshooting Cisco routers, switches, firewalls, and enterprise networks * Ability to work independently and solve complex technical problems * Strong written and verbal communication skills Key requirements * healthcare benefits * paid leave * retirement plans * insurance programs * education and training assistance

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on us.experteer.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

1:29 min

Expanding practical knowledge with community sandboxes and resources

Stuart Clark Ā· LIVE

2:04 min

Enhancing network privacy with routing fees and onion routing

Andreas M Antonopoulos Ā· LIVE

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira Ā· Coffee With Developers

3:45 min

Prototyping deterministic agents with n8n and PyATS

Alfonso Sandoval Rosas Alfonso Sandoval Rosas Ā· Europe 2026 Virtual

1:51 min

Overview of the three Google Maps routing applications

GermÔn Álvarez · LIVE

Videos

See all

Related articles

See all