Network Firewall Engineer

CACI; Sterling (VA); On-site; USD 121,000 - 266,000; Full time

Job summary

CACI is seeking a Network Firewall Engineer to support implementation, configuration, and ongoing maintenance of our firewall infrastructure. You will work with the network security team to ensure perimeter defense is effective and secure.

The role emphasizes hands-on configuration across platforms, monitoring, and incident response, with opportunities to impact the security of critical networks. Travel is up to 10% and TS/SCI with Poly is required.

Qualifications

• Bachelor’s degree in a technical field or equivalent work experience.
• 10+ years of related work experience.
• TS/SCI with Poly clearance required.
• Strong organizational skills and attention to detail.
• Expert-level knowledge of major firewall platforms (Palo Alto, Cisco ASA, Forcepoint).
• Solid understanding of networking protocols, OSI model, and common network architectures.
• Experience with VPNs, NAT, IDS/IPS, and DMZ configurations.
• Strong TCP/IP, DNS, HTTP, and routing protocol knowledge (OSPF, EIGRP, BGP).
• Excellent troubleshooting, problem-solving, and analytical skills.
• Strong written and verbal communication.

Responsibilities

• Assist in implementing and configuring firewall systems across platforms.
• Perform day-to-day firewall administration and ACL management.
• Monitor logs and alerts; respond to incidents and escalate as needed.
• Conduct firewall health checks and performance tuning.
• Troubleshoot network connectivity and firewall-related issues.
• Maintain firewall documentation and SOPs.
• Participate in firewall upgrades and new deployments.
• Conduct firewall rule reviews and cleanups.
• Support IPS and application control features.
• Collaborate with IT teams for integrated firewall solutions.
• Stay updated on emerging firewall threats and technologies.
• Participate in on-call rotation for incidents.

Skills

Networking fundamentals

Troubleshooting

Communication skills

Security incident response

Firewall concepts

Education

Bachelor’s degree in a technical field

TS/SCI with Poly

Tools

Palo Alto

Cisco ASA

Forcepoint

Python scripting

Bash scripting

Job description

Job Title: Network Firewall EngineerJob Category: Information TechnologyTime Type: Full timeMinimum Clearance Required to Start: TS/SCI with PolygraphEmployee Type: RegularPercentage of Travel Required: Up to 10%Type of Travel: Local

The Opportunity

We are seeking a skilled and detail-oriented Network Firewall Technician to support the implementation, configuration, and maintenance of our organization's firewall infrastructure. The ideal candidate will work closely with the network security team to ensure the effective operation and security of our network perimeter defenses

Responsibilities:

• Assist in the implementation and configuration of firewall systems across various platforms
• Perform day-to-day firewall administration tasks, including rule updates, policy modifications, and access control list (ACL) management
• Monitor firewall logs and alerts, responding to, and escalating security incidents as appropriate
• Conduct regular firewall health checks and performance tuning
• Assist in troubleshooting network connectivity and security issues related to firewalls
• Help maintain firewall documentation, including configuration changes and standard operating procedures
• Participate in firewall upgrade projects and new deployments
• Assist in conducting periodic firewall rule reviews and clean-up efforts
• Support the implementation of next-generation firewall features such as IPS and application control
• Collaborate with other IT teams members to ensure proper integration of firewall systems with other network components
• Stay current with emerging security threats and firewall technologies
• Participate in on-call rotation for critical firewall and network security incidents

Qualifications:

• Bachelor's degree in a Technical field or equivalent work experience
• 10+ years of related work experience
• TS/SCI with Poly
• Exceptional organizational skills and attention to detail
• Expert-level knowledge of major firewall platforms (e.g., Palo Alto, Cisco ASA, Forcepoint)
• Strong understanding of networking protocols, OSI model, and common network architectures
• Experience with network security and software-defined networking (SDN) concepts
• Hands-on experience with network security concepts, such as VPNs, NAT, IDS/IPS, and DMZ configurations.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), network routing protocols (OSPF, EIGRP, BGP), and network architectures.
• Excellent troubleshooting, problem-solving, and analytical skills
• Strong communication skills, both written and verbal

Desired:

• Industry certifications such as CISSP, CISM, CCNP Security, Palo Alto PCNSE, or equivalent are highly desired.
• Proficiency in scripting languages (e.g., Python, Bash) for automation and management tasks

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$120,800 - $265,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.