Network Engineer

CACI; Ashburn (VA); Hybrid; USD 110,000 - 160,000; Full time

Job summary

CACI seeks a Senior Network Engineer to join the BEAGLE ASF Team supporting CBP in Northern Virginia. You will optimize DMZ/edge networks, secure high-availability environments, and ensure resilient connectivity for remote field operators in a critical border-security context.

Role emphasizes F5 BIG-IP administration, NGFWs, and FMV QoS, with Agile Scrum collaboration and extensive documentation duties. Hybrid schedule with on-site Ashburn, VA, and a chance to mentor junior staff.

Qualifications

• Citizenship & clearance: US citizen eligible for CBP background check.
• 5-7+ years of related network engineering experience.
• B.S. in Computer Science, Network Engineering, or related field (or equivalent).
• Hybrid work schedule with on-site Ashburn, VA.

Responsibilities

• DMZ & Edge Architecture: design, secure, and maintain external-facing DMZ networks with high availability using F5 and NGFWs.
• F5 BIG-IP: end-to-end administration, engineering, and lifecycle management (LTM, APM, ASM/ WAF, GTM, AFM).
• Video streaming: optimize network paths and QoS for low-latency FMV.
• Remote/Discon. client support: build secure, resilient VPN/SD-WAN paths for field users.
• Agile teamwork: collaborate in Scrum sprints translating requirements into designs.
• Infrastructure: configure routing/switching connecting to core CBP networks and AD.
• Documentation: contribute to ISA, SDD, SMP, and BOM/BOE.
• Tier IV support: escalation handling for enterprise WAN infrastructure.
• Mentorship: coach junior/mid-level network team members.

Skills

F5 BIG-IP

Cisco NGFW

DMZ design

VPN/SD-WAN

FMV QoS

BGP routing

Education

Bachelor's degree in CS or related

Tools

F5 BIG-IP

Cisco Firepower

Job description

Network Engineer

• Job Category: Information Technology
• Time Type: Full time
• Minimum Clearance Required to Start: None
• Employee Type: Regular
• Percentage of Travel Required: Up to 10%
• Type of Travel: Local

The Opportunity

CACI is currently looking for a Senior Network Engineer with agile methodology experience to join our BEAGLE (Border Enforcement Applications for Government Leading-Edge Information Technology) Agile Solution Factory (ASF) Team supporting the Customs and Border Protection (CBP) client located in Northern Virginia! As a member of the BEAGLE ASF Team, you will support the men and women charged with safeguarding the American people and enhancing the Nation's safety, security, and prosperity. CBP agents and officers are on the front lines, every day, protecting our national security by combining customs, immigration, border security, and agricultural protection into one coordinated and supportive activity. In this role, you will be a key technical driver in optimizing network performance for critical border security applications. Your expertise will be focused on securing and managing high-availability servers within the Demilitarized Zone (DMZ), optimizing the network infrastructure for low-latency Full-Motion Video (FMV) streaming, and ensuring resilient connectivity for remote and disconnected tactical field clients operating at the tactical edge.

Responsibilities

• DMZ & Edge Architecture: Design, implement, secure, and maintain the network architecture for external-facing systems within the DMZ, ensuring robust security postures, proper zoning, and high availability using F5 Load Balancers and Next-Generation Firewalls (NGFW).
• F5 BIG-IP Network & Application Services: Provide comprehensive end-to-end administration, engineering, and lifecycle management of F5 BIG-IP solutions, encompassing LTM with custom iRules scripting, APM, ASM/Advanced WAF, GTM, and AFM to ensure application availability, performance, security, and access control.
• Video Streaming Optimization: Engineer, monitor, and fine-tune network paths, Quality of Service (QoS), and routing protocols (multicast/unicast) to support seamless, low-latency live Full-Motion Video (FMV) streaming to tactical operators.
• Remote & Disconnected Client Support: Build and maintain secure, highly resilient network pathways (including VPNs, SD-WAN, and cellular/satellite backup) designed to support remote field users and disconnected edge clients who experience intermittent, low-bandwidth, or high-latency network conditions.
• Agile Team Collaboration: Serve as a collaborative member of an Agile Scrum team, translating business requirements into technical network designs, hardware/software solutions, and automated network updates in short sprints.
• Infrastructure Management: Design, configure, and troubleshoot routing and switching for test environments, including connections back to the core CBP network, Active Directory, and endpoint configuration managers.
• Technical Documentation: Contribute to Basis of Estimate (BOE) and Bill of Materials (BOM) buildups, and support the creation/update of critical documentation including Interconnection Security Agreements (ISA), System Design Documents (SDD), and System Maintenance Plans (SMP).
• Tier IV Support: Provide Tier IV escalation support for CBP's Enterprise Wide Area Network (WAN) Infrastructure, troubleshooting complex routing across highly secure, multi-tenant MPLS networks.
• Mentorship: Provide technical guidance, advice, and mentoring to junior and mid-level network team members.

Qualifications

• Citizenship & Clearance: Must be a U.S. Citizen with the ability to pass a CBP background investigation. Criteria include, but are not limited to: o 3-year check for felony convictions o 1-year check for illegal drug use o 1-year check for misconduct such as theft or fraud
• Professional Experience: 5-7+ years of related network engineering experience supporting complex, enterprise-level environments.
• Education: College degree (B.S.) in Computer Science, Network Engineering, Information Management Systems, or a related discipline (equivalent experience accepted in lieu of degree).
• Location: Must be available to work a hybrid schedule with an on-site requirement in Ashburn, VA.

You are good at

• - Secure Infrastructure Design: Hands-on experience configuring Cisco Next-Generation Firewalls (NGFWs), Cisco Firepower, F5 Load Balancers (LTM/GTM), and establishing secure DMZ zone transitions.
• - Video & Media Routing: Optimizing enterprise-wide networks for heavy-bandwidth streaming applications, including multicast routing (PIM, IGMP), traffic shaping, and complex QoS configurations.
• - Cisco Routing & Switching: Advanced configuration and troubleshooting of Cisco routers (ASRs, ISRs, Generation 2, and 1900-7600 series) and switches to a CCNP level.
• - Core Protocol Expertise: Expert-level knowledge of IP routing (IPv4/IPv6), BGP (required), EIGRP, OSPF, and Virtua