ISE Network Engineer

• Design, implement, and sustain enterprise network infrastructures supporting high availability and mission operations
• Serve as a senior technical resource for network troubleshooting, outage resolution, and performance optimization
• Perform root-cause analysis on complex network issues and drive permanent fixes
• Configure, maintain, and troubleshoot Cisco and Juniper routing and switching platforms
• Configure, administer, and troubleshoot Cisco Identity Services Engine (ISE), including policy sets and authentication/authorization workflows
• Configure and support next-generation firewalls, including Juniper SRX and Cisco Firepower platforms
• Support firewall rule management, policy validation, and traffic-flow troubleshooting across secured boundaries
• Maintain accurate technical documentation, diagrams, and standard operating procedures
• Participate in planning and implementation of network upgrades and architectural improvements
• Ensure compliance with DoD security and configuration standards

We are seeking an experienced ISE Network Engineer with 8+ years of hands-on experience in enterprise network infrastructure, with deep expertise in Cisco Identity Services Engine (ISE) and Cisco DNA Center (DNAC). The ideal candidate will collaborate to design, implement, secure, and automate complex network environments in a DoD environment., * 8+ years of hands-on network engineering experience in enterprise or government environments

• Strong understanding of TCP/IP, IPv4, routing, switching, and network troubleshooting
• Proven experience with Cisco and/or Juniper network devices
• Hands-on experience configuring and administering Cisco ISE
• Experience supporting Juniper SRX firewalls and Cisco Firepower (FMC-managed)
• Strong understanding of firewall policies, security zones, and traffic inspection
• Familiarity with DoD STIGs and operating in compliance-driven environments
• CCNA, CCNP, JNCIS, or JNCIP certification (active or previously held)
• DoD 8570 IAT Level II certification (Security+ or equivalent)

Desired Skills

• Experience integrating Cisco ISE with 802.1X, TACACS+, or network access control workflows
• Exposure to advanced firewall features such as IDS/IPS, URL filtering, or application-layer inspection
• Familiarity with vulnerability scanning tools (e.g., Nessus)
• Basic scripting or automation exposure (PowerShell, Ansible, etc.)

• Free on-site parking in Washington, DC
• 100% employer-paid medical, dental, and vision for employees and dependents
• Flexible Spending Accounts (healthcare, dependent care, and commuter)
• Life insurance, short-term disability and long-term disability
• 401(k) with immediate vesting of company contribution
• Generous PTO policy (15 vacation, 5 sick, 2 personal days, 11 holidays)

With more than 20 years of securing some of the U.S. Department of Defense and the Intelligence Community’s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients.

Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer’s unique requirements. Visit www.jflconsulting.com