Cloud Network Engineer - SOCEUR

CACI International; United States; À distance; USD 116 000 - 254 000; Plein temps

Résumé du poste

CACI International is seeking a Cloud Network Engineer to design, implement, and manage secure cloud and hybrid networks on Google Cloud Platform for SOCEUR. You will architect VPCs, interconnects, and firewall policies to support a multi‑level security ecosystem.

The role requires TS/SCI clearance, a technical bachelor’s degree or equivalent, 8+ years in network engineering with cloud focus, Terraform IaC, and hands‑on experience with GCP networking, Cloud Armor, and Istio in GKE.

Qualifications

• Active TS/SCI clearance required; US citizen.
• Bachelor's degree in a technical field or equivalent experience.
• DoD 8570.01-M / DoD 8140 IAT Level II+ baseline cert (e.g., Sec+, CISSP).
• 8+ years in network engineering with 5+ years in cloud/hybrid networks on a major cloud (GCP preferred).
• Terraform IaC experience.
• Expertise in BGP, IPSec, DNS, and load balancing.
• Hands-on with GCP networking: VPCs, Interconnect/VPN, Cloud Armor, VPC Service Controls.
• Scripting proficiency (Python or Bash).
• Google Cloud Professional Cloud Network Engineer certification.

Responsabilités

• Design and implement enterprise-wide cloud and hybrid network architectures on GCP, including VPC design, subnetting, routing, and firewall policies.
• Lead secure hybrid connectivity with Cloud Interconnect, VPNs, and integration with tactical systems (e.g., TMN).
• Define and manage network infrastructure as code (IaC) using Terraform.
• Architect and configure multi-layer network security, including VPC Service Controls, Cloud Armor, and NGFW.
• Implement and manage GCP load balancers (Global, Regional, Internal).
• Lead network traffic analysis and bandwidth optimization using Google Cloud Observability and Network Intelligence Center.
• Design and manage networking for GKE, Istio, and pod-to-pod policies.
• Develop and maintain network architecture diagrams and SOPs.

Connaissances

Terraform

GCP Networking

Scripting (Python/Bash)

Security clearance

BGP/IPSec/DNS

Load balancing

Istio/Kubernetes

Formation

Bachelor's degree in a technical field

Master’s degree in computer science or related field

Outils

GCP

Cloud Interconnect/VPN

VPC Service Controls

Cloud Armor

NGFW appliances

Kubernetes/GKE

Description du poste

Job Title: Cloud Network Engineer - SOCEUR

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular-Long Term Assignment

Percentage of Travel Required: Up to 10%

Type of Travel: Local * * *

The Opportunity:

As a CACI Cloud Network Engineer to design, implement, and manage secure, scalable network architectures on Google Cloud Platform (GCP). This role sits inside the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) program team and is responsible for architecting the foundational networking that underpins a mission-critical, multi-level security ecosystem. The individual will design secure networking boundaries, configure hybrid connectivity for on-premises and tactical systems, and optimize network performance and security. The individual will interact regularly with cybersecurity architects, DevSecOps engineers, and mission owners to ensure robust, resilient, and high-performance connectivity for Allied, partner, and US operations.

Responsibilities:

• Design and implement enterprise-wide cloud and hybrid network architectures on GCP, including VPC design, subnetting, routing, and firewall policies.
• Lead the implementation of secure hybrid connectivity solutions, including Cloud Interconnect, dedicated VPNs, and integration with tactical communication systems (e.g., TMN).
• Define and manage network infrastructure as code (IaC) using Terraform, enabling automated, repeatable, and auditable network deployments.
• Architect and configure multi-layer network security, including VPC Service Controls, Cloud Armor (WAF), and next-generation firewall (NGFW) virtual appliances.
• Implement and manage a suite of GCP load balancers (Global, Regional, Internal) to ensure high availability and optimal traffic distribution.
• Lead network traffic analysis and bandwidth optimization efforts, using tools like Google Cloud Observability and Network Intelligence Center to diagnose latency and resolve bottlenecks.
• Design and manage networking for containerized workloads, including GKE cluster networking, service mesh (e.g., Istio), and pod-to-pod communication policies.
• Develop and maintain comprehensive network architecture diagrams and standard operating procedures.

Qualifications:

• Must be a US Citizen possessing an active TS/SCI security clearance.
• Bachelor's degree in a technical field, or equivalent practical experience.
• DoD 8570.01-M / DoD 8140 IAT Level II (or higher) baseline certification (e.g., CompTIA Security+, CISSP).
• 8+ years of experience in network engineering, with at least 5+ years focused on designing and managing cloud and hybrid networks on a major cloud platform (GCP preferred).
• Advanced proficiency in defining network infrastructure as code (IaC) with Terraform.
• Deep expertise in enterprise networking protocols and concepts, including BGP, IPSec, DNS, and load balancing.
• Hands‑on experience with GCP networking products, including VPCs, Cloud Interconnect/VPN, Cloud Armor, and VPC Service Controls.
• Proficiency in at least one scripting language (e.g., Python, Bash) for network automation tasks.
• Google Cloud Professional Cloud Network Engineer certification.

Desired:

• Master’s degree in computer science or a related field.
• Google Cloud Professional Cloud Security Engineer certification.
• Professional‑level networking certification such as Cisco CCNP or equivalent.
• Experience designing networks for air‑gapped or limited‑connectivity environments and familiarity with Cross‑Domain Solutions (CDS).
• Experience with container networking (Kubernetes/GKE) and service mesh technologies.
• ITIL v3/v4 Foundations certification

Candidate will qualify for:

• Moving expenses to relocate household from CONUS to Stuttgart, Germany
• Dependent Education
• LQA - Living Quarters Allowance

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$115,600 - 254,200 USD

CACI is an Equal Opportunity Employer.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.