Senior Cloud Network Engineer — GCP & Hybrid Security

CACI International; United States; Remote; USD 116,000 - 254,000; Full time

Job summary

CACI International is seeking a Cloud Network Engineer to design, implement, and manage secure cloud and hybrid networks on Google Cloud Platform for SOCEUR. You will architect VPCs, interconnects, and firewall policies to support a multi‑level security ecosystem.

The role requires TS/SCI clearance, a technical bachelor’s degree or equivalent, 8+ years in network engineering with cloud focus, Terraform IaC, and hands‑on experience with GCP networking, Cloud Armor, and Istio in GKE.

Qualifications

• Active TS/SCI clearance required; US citizen.
• Bachelor's degree in a technical field or equivalent experience.
• DoD 8570.01-M / DoD 8140 IAT Level II+ baseline cert (e.g., Sec+, CISSP).
• 8+ years in network engineering with 5+ years in cloud/hybrid networks on a major cloud (GCP preferred).
• Terraform IaC experience.
• Expertise in BGP, IPSec, DNS, and load balancing.
• Hands-on with GCP networking: VPCs, Interconnect/VPN, Cloud Armor, VPC Service Controls.
• Scripting proficiency (Python or Bash).
• Google Cloud Professional Cloud Network Engineer certification.

Responsibilities

• Design and implement enterprise-wide cloud and hybrid network architectures on GCP, including VPC design, subnetting, routing, and firewall policies.
• Lead secure hybrid connectivity with Cloud Interconnect, VPNs, and integration with tactical systems (e.g., TMN).
• Define and manage network infrastructure as code (IaC) using Terraform.
• Architect and configure multi-layer network security, including VPC Service Controls, Cloud Armor, and NGFW.
• Implement and manage GCP load balancers (Global, Regional, Internal).
• Lead network traffic analysis and bandwidth optimization using Google Cloud Observability and Network Intelligence Center.
• Design and manage networking for GKE, Istio, and pod-to-pod policies.
• Develop and maintain network architecture diagrams and SOPs.

Skills

Terraform

GCP Networking

Scripting (Python/Bash)

Security clearance

BGP/IPSec/DNS

Load balancing

Istio/Kubernetes

Education

Bachelor's degree in a technical field

Master’s degree in computer science or related field

Tools

GCP

Cloud Interconnect/VPN

VPC Service Controls

Cloud Armor

NGFW appliances

Kubernetes/GKE

Job description

CACI International is seeking a Cloud Network Engineer to design, implement, and manage secure cloud and hybrid networks on Google Cloud Platform for SOCEUR. You will architect VPCs, interconnects, and firewall policies to support a multi‑level security ecosystem.

The role requires TS/SCI clearance, a technical bachelor’s degree or equivalent, 8+ years in network engineering with cloud focus, Terraform IaC, and hands‑on experience with GCP networking, Cloud Armor, and Istio in GKE.