Network ISE Engineer (SME)

Description

The team at AFRICOM in Stuttgart, Germany is looking for a Network ISE SME.

You should be a Cisco ISE specialist, not a generalist who has only supported ISE now and then.

You will be the main technical owner of Cisco Identity Services Engine in a live enterprise environment, with hands-on depth in designing, rolling out, running and troubleshooting ISE at scale.

The goal is a full feature set, high availability and strong performance from automation and orchestration tools, while keeping the network secure and ready for missions.

The role suits a creative, team-minded engineer who can connect traditional network work with modern automation and DevOps to support AFRICOM operations.

Responsibilities

• Build, set up and upkeep secure DoD enterprise and datacenter networks, keeping them highly available and ready for missions across geographically spread sites.
• Run Cisco ISE for secure endpoint access, policy enforcement and Zero Trust support. Design, implement and maintain reliable, scalable network systems.
• Set up and maintain complex enterprise routing and switching using standard protocols and advanced transport such as DMVPN and MPLS Segment-Routing.
• Manage and fix datacenter fabrics built on Cisco ACI and Cisco Nexus switches.
• Deploy, manage and update Palo Alto and Cisco Firepower firewalls, including Panorama and FMC.
• Provision, key and maintain KG encryptors such as TACLANE to protect classified and mission-critical traffic.
• Build automation frameworks with Ansible, Python and REST APIs to speed up deployments and support Software-Defined Access (SDA).
• Maintain core services: F5 load balancers and Infoblox for DNS, DHCP and IPAM.
• Find and fix performance bottlenecks and single points of failure before they cause trouble.
• Write a roadmap for maturing DevOps practice and drive adoption of Infrastructure as Code using Ansible.
• Collect and analyze metrics for performance tuning, fault discovery and after-action reports.
• Work with operations teams on automation use cases, improving reliability through careful testing and release procedures.

Requirements

• Bachelor's degree in computer science, information technology or a closely related technical field.
• Active Secret clearance, with the ability to obtain Top Secret when required.
• 5-10+ years of hands-on network engineering in mid-to-large enterprise or military settings.
• Demonstrated skill with network access control, 802.1X, policy sets, profiling, posture, guest and BYOD onboarding, TACACS+, and identity-based enforcement across wired, wireless and remote access.
• Solid scripting ability in Python, Go or PowerShell.
• Practical use of automation and orchestration tools such as Ansible, VMware Aria Suite and ServiceNow.
• Experience with Infrastructure as Code, particularly Ansible.
• DoD 8570/8140 IAT Level II baseline certification is required, such as Security+ CE.
• U.S. citizenship.

Conditions

Full-time position.

Regular, long-term assignment.

Based in Stuttgart, Germany.

Local travel of up to 10%.

Proposed salary range: $99,300 to $208,600 USD.

Final pay depends on factors including location, Federal Government contract labor categories and wage rates, prior relevant experience, specific skills, education and certifications.

Benefits

• Competitive compensation plus learning and development opportunities.
• Flexible time off that lets you take the time you need.
• Access to robust learning resources to support your career goals.
• Broad benefits covering healthcare, wellness, financial, retirement, family support, continuing education and time off.