Network Firewall Lead

CACI; Sterling (VA); On-site; USD 121,000 - 266,000; Full time

Job summary

CACI in Sterling, VA seeks an experienced Network Firewall Lead to oversee design, implementation, and ongoing maintenance of our firewall infrastructure across multiple locations and cloud environments. You will mentor the firewall team, enforce policies, conduct audits, and stay ahead of threats while coordinating with other IT teams to ensure secure integration.

This role requires a TS/SCI with Poly, 10+ years in network security, and strong communication skills to guide efforts and document

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or equivalent work experience.
• 10+ years of related work experience.
• TS/SCI with Poly clearance required.
• Strong leadership and organizational skills.
• Expert-level knowledge of major firewall platforms (e.g., Palo Alto, Cisco ASA, Forcepoint).
• Experience with VPNs, NAT, IDS/IPS, and DMZ configurations.
• Solid understanding of TCP/IP, DNS, HTTP; routing protocols (OSPF, EIGRP, BGP).
• Excellent troubleshooting and communication skills.

Responsibilities

• Lead and mentor the Firewall team.
• Design, implement, and maintain enterprise firewall solutions.
• Develop and enforce firewall policies and procedures.
• Manage firewall rules, ACLs, and security policies.
• Conduct security audits and vulnerability assessments.
• Coordinate with IT teams for integration with security and network tech.
• Provide technical leadership and vendor evaluation.
• Maintain firewall configuration documentation and disaster recovery procedures.
• Participate in on-call rotation for incidents.

Skills

Security clearance TS/SCI with Poly

Firewall platforms expertise

SDN concepts

VPNs

IDS/IPS

Firewall policy management

Team leadership

Troubleshooting

Networking protocols

Documentation & compliance

Education

Bachelor's degree in CS/IT or equivalent

Job description

The Opportunity:

We are seeking an experienced and skilled Network Firewall Lead to oversee the design, implementation, and maintenance of our organization's firewall infrastructure. The ideal candidate will be responsible for ensuring the security, performance, and reliability of our network perimeter defenses across multiple locations and cloud environments.

Responsibilities:

• Manage and mentor the Firewall team
• Lead the design, implementation, and maintenance of enterprise-wide firewall solutions
• Develop and enforce firewall policies and procedures aligned with industry best practices and compliance requirements
• Manage and optimize firewall rules, access control lists (ACLs), and security policies
• Conduct regular security audits and vulnerability assessments of firewall configurations
• Troubleshoot complex firewall and network security issues
• Implement and manage next-generation firewall features such as IPS, application control, and SSL inspection
• Coordinate with other IT teams to ensure proper integration of firewall systems with other security and network technologies
• Stay current with emerging threats and security trends, recommending and implementing improvements as needed
• Provide technical leadership and mentoring to junior firewall and security team members
• Manage vendor relationships and evaluate new firewall technologies and solutions
• Develop and maintain documentation for firewall configurations, change management, and disaster recovery procedures
• Participate in on-call rotation for critical firewall and network security incidents

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or equivalent work experience
• 10+ years of related work experience
• TS/SCI with Poly
• Exceptional organizational skills and attention to detail
• Expert-level knowledge of major firewall platforms (e.g., Palo Alto, Cisco ASA, Forcepoint)
• Experience with network security and software-defined networking (SDN) concepts
• Hands-on experience with network security concepts, such as VPNs, NAT, IDS/IPS, and DMZ configurations.
• Strong understanding of network protocols (TCP/IP, DNS, HTTP, etc.), network routing protocols (OSPF, EIGRP, BGP), and network architectures.
• Excellent troubleshooting, problem-solving, and analytical skills
• Strong communication skills, both written and verbal

Desired:

• Industry certifications such as CISSP, CISM, CCNP Security, Palo Alto PCNSE, or equivalent are highly desired.
• Proficiency in scripting languages (e.g., Python, Bash) for automation and management tasks

This position is contingent on funding and may not be filled immediately. However, this position is representative of positions within CACI that are consistently available. Individuals who apply may also be considered for other positions at CACI.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you'll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You'll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$120,800 - $265,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.