Senior Firewall Engineer

CACI International Inc; Springfield (VA); On-site; USD 75,000 - 158,000; Full time

Job summary

CACI International Inc is seeking a Senior Firewall Engineer to support enterprise-wide security architecture and governance. You will design, implement, and maintain secure networks across WAN/LAN, coordinating with government and customers to protect missions.

The role requires active TS/SCI clearance, DoD certifications, and hands-on experience with Palo Alto, Cisco, Juniper, F5, IDS, and VMware. Expect a dynamic environment focused on integrity, trust, and continuous growth, with up to 10%

Qualifications

• Active TS/SCI clearance with ability to pass polygraph.
• BA/BS in IT, cybersecurity, or related field.
• Minimum 5 years in network security for large-scale enterprise networks.
• DoD 8140/8570 IAT Level II certification (current).
• Post-hire: CSSP Infrastructure Support certification within 120 days.
• Experience with firewalls (Palo Alto, Juniper, Cisco).
• Experience with Routers/Switches (Juniper, Cisco).
• IDS/IPS experience (FireEye, F5, Cisco FTD).
• Unix, RHEL, Windows Enterprise AD, VMware.

Responsibilities

• Assist with design, analysis, testing, and implementation of secure network architectures.
• Conduct risk assessment and provide design recommendations.
• Manage WAN, LAN, CAN, and remote network security as well as incident and problem management.
• Oversee security infrastructure sustainment, maintenance, and advanced configuration.
• Oversee the reporting, documentation, and investigation of all security‑related incidents; lead corrective measures.
• Develop and execute standard operating procedures (SOPs) for security tools.
• Evaluate and report on new network Security technologies to enhance the capabilities of the network.
• Act as liaison to the contract and customer management, and government DAA regarding network security status, policies, and procedures.

Skills

Network security

Security architectures

Risk assessment

DoD 8140/8570

IAT Level II

Education

BA/BS degree

Related field

Tools

Palo Alto

Juniper

Cisco

F5

FireEye

Cisco FTD

Windows AD

VMware

RHEL

Job description

Job Title: Senior Firewall Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity

As a member of the TCS Network Security Services (NSS) team, you will work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives.

Responsibilities

• Assist with design, analysis, testing, and implementation of state-of-the‑art secure network architectures.
• Conduct risk assessment and provide design recommendations.
• Manage WAN, LAN, CAN, and remote network security as well as incident and problem management.
• Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools).
• Oversee the reporting, documentation, and investigation of all security‑related incidents; lead the development and implementation of corrective measures.
• Develop and execute standard operating procedures (SOPs) for security tools.
• Evaluate and report on new network Security technologies to enhance the capabilities of the network.
• Act as liaison to the contract and customer management, and government Designated Approving Authority (DAA) regarding network security status, policies, and procedures.

Qualifications

Required:

• Active TS/SCI (Post‑hire: Must be able to successfully pass/maintain a U.S. Government Polygraph)
• BA/BS Degree in a related field (IT, Cybersecurity, and other related fields) Additional experience may be considered in lieu of a degree
• Minimum 5 years of related technical experience in Network Security with large‑scale enterprise/global networks in a high‑paced, diverse environment.
• DoD 8140.01 and DoD 8570.01-M IAT Level II compliant certification (current)
• Post‑hire: Must be able to successfully obtain/maintain CSSP Infrastructure Support certification within 120 days of start date
• Experience with Firewalls (e.g. Palo Alto, Juniper, Cisco, etc.)
• Experience with Routers/Switches (e.g. Juniper, Cisco, etc.)
• Experience with Intrusion Detection Systems/IDS Products (e.g. FireEye, F5 Load Balancer, Cisco FTD, etc.)
• Experience with Unix, RHELS OS, Windows Enterprise AD, VMware

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high‑performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day.

You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The Proposed Salary Range For This Position Is

$75,200-$158,100

• You’ll have the autonomy to take the time you need through a unique flexible time off benefit
• You’ll have access to robust learning resources
• healthcare
• wellness
• financial
• retirement
• family support
• continuing education
• time off benefits

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.