Physical Security Network Engineer - SOUTHCOM J2

Celestar Corporation is seeking a Physical Security Network Engineer to support USSOUTHCOM J2 Physical Security Services. The primary place of performance will be in Doral, FL. If interested and meet the qualifications, we encourage you to apply for this rewarding and impactful opportunity.

ANTICIPATED AWARD: July 2026
ANTICIPATED START: July 2026
PERIOD OF PERFORMANCE: 1 Base Year + 4 Option Years
LOCATION: Doral, Florida

CLEARANCE REQUIREMENT: Active TS/SCI (within 5 years)

About Us:

Celestar, a B&A Company, offers highly competitive salaries and benefits. Our comprehensive benefits package includes company-paid employee and family dental insurance, employee health insurance, life insurance, and disability coverage. Additionally, we provide a 401(k)-retirement plan with company matching, paid holidays, and personal time off.

Responsibilities include, but are not limited to:

• Responsible for the ESS/LENEL network infrastructure, operation/maintenance (O&M) and lifecycle.
• Provide IT Tier 3 Service – Typically the highest level of services in a three-tiered technical service model responsible for handling the most difficult or advanced problems. The contractor shall be an expert in their fields and are responsible for the research and development of solutions to new or unknown issues.
• Shall analyze the code, data and in some instances, an issue may be so problematic to the point where the product cannot be salvaged and must be replaced. If it is determined that a problem can be solved, then the contractor is responsible for designing and developing one or more courses of action, evaluating each of these courses in a test-case environment, and implementing the best solution to the problem. Once the solution is verified, it is delivered to the customer and made available for future troubleshooting and analysis with government maintaining final approval authority.
• Configuring, maintaining, analyzing, and monitoring data output from the ESS network security hardware to accurately detect and respond to threats across the network. The contractor shall operate, monitor, alert, manage, maintain, install, and troubleshoot the ESS network infrastructure devices and services. The contractor shall provide technical recommendations for the development of policies for all aspects of network management and operations.
• Provide internal and external IPv4 primary and secondary DNS services for USSOUTHCOM security ESS network.
• Monitoring and Management Solutions – Leverage the Fault, Configuration, Accounting/Administration, Performance, and Security (FCAPS) framework for network management.
• Shall monitor, alert, and forecast problems before they arise, which is a key component to healthy and self-healing IPv4 networks. The contractor shall alert and consult the Government on any fault, performance, and/or security issues that may arise.
• Access Control – Operate and maintain enterprise applications and devices for network Authentication, Authorization, and Accounting (AAA), port authentication, network end-device compliance, device profiling, and policy compliance.
• Log Management – Configure and maintain all network equipment for log collection and retention according to applicable policies and regulations. This includes services to configure, maintain, analyze, and monitor data input and output from the SIEM tools in order to accurately detect and respond to problems, outages, and security threats. Provide intelligent insights that enable quick response measures to reduce the impact of incidents and proactively prevent future incidents.
• Configure, test, fine-tune, and maintain all rule sets within SIEM, and Contractor shall rule sets exhibit fluidity to adapt to changes within the AO Uniform environment. The contractor shall analyze and investigate all alerts/offences generated within SIEM on a daily basis and resolve offences upon termination of analysis/investigation.
• Analyze and fine-tune rule sets to reduce false positives withi