Senior Network Engineer (Firewall)

Responsibilities: 

• Lead implementation and management of micro-segmentation platforms, web application firewalls and Next-Generation Firewalls (NGFWs) across 350+ global facilities supporting mission-critical diplomatic operations
• Lead troubleshooting of complex firewall issues, coordinating with DT teams and facilitating secure connectivity with Government agencies and partner organizations
• Lead design, creation, implementation, and troubleshooting of Firewall Rules for networking devices and application communications, ensuring security while enabling business operations
• Design and implement comprehensive high-availability solutions including load balancing, denial of service detection and remediation leveraging modern network security technologies
• Lead coordination with DT Firewall Advisory Board for rule submissions, ensuring compliance with Department of State firewall policies and security standards
• Lead network component tuning activities to maintain optimum performance and security posture in accordance with change management procedures and best practices
• Develop comprehensive firewall standards, procedures manuals, and performance management procedures meeting DT/EA/CST requirements and federal compliance frameworks
• Conduct firewall security assessments, vulnerability analysis, and threat modeling to proactively identify and mitigate potential security risks
• Function as a technical expert across multiple project assignments, planning and leading major firewall infrastructure initiatives while mentoring team members and supervising network security operations

Qualifications: 

Required –

• Bachelor's degree + 8 years of experience in related fields, such as network engineering, network security, firewall administration, cybersecurity, or infrastructure engineering; equivalencies considered.
• Active Secret Clearance
• Proven experience implementing and managing Next-Generation Firewalls (NGFWs), web application firewalls, and enterprise firewall architectures for large-scale environments
• Demonstrated expertise in firewall rule design, high-availability configurations, load balancing, and denial of service (DoS) mitigation strategies
• Excellent leadership abilities with proven experience planning and leading firewall infrastructure projects, functioning as a subject matter expert, and supervising network security teams

Desired –

• Prior experience supporting federal agencies, especially the Department of State
• Professional certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco CCNP Security, F5 Certified Technology Specialist (F5-CTS), or CISSP
• Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience supporting 300+ geographically distributed facilities
• Demonstrated experience building and managing micro-segmentation platforms such as Illumio and VMware NSX-T
• Experience with Firewall Advisory Boards, security policy development, and compliance with federal security frameworks (NIST, FISMA)
• Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience supporting 300+ geographically distributed facilities

What You Can Expect:

 A culture of integrity.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is: