Senior Network Firewall Engineer – TS/SCI, Flexible Time Off

CACI; Sterling (VA); On-site; USD 121,000 - 266,000; Full time

Job summary

CACI is seeking a Network Firewall Engineer to support implementation, configuration, and ongoing maintenance of our firewall infrastructure. You will work with the network security team to ensure perimeter defense is effective and secure.

The role emphasizes hands-on configuration across platforms, monitoring, and incident response, with opportunities to impact the security of critical networks. Travel is up to 10% and TS/SCI with Poly is required.

Qualifications

• Bachelor’s degree in a technical field or equivalent work experience.
• 10+ years of related work experience.
• TS/SCI with Poly clearance required.
• Strong organizational skills and attention to detail.
• Expert-level knowledge of major firewall platforms (Palo Alto, Cisco ASA, Forcepoint).
• Solid understanding of networking protocols, OSI model, and common network architectures.
• Experience with VPNs, NAT, IDS/IPS, and DMZ configurations.
• Strong TCP/IP, DNS, HTTP, and routing protocol knowledge (OSPF, EIGRP, BGP).
• Excellent troubleshooting, problem-solving, and analytical skills.
• Strong written and verbal communication.

Responsibilities

• Assist in implementing and configuring firewall systems across platforms.
• Perform day-to-day firewall administration and ACL management.
• Monitor logs and alerts; respond to incidents and escalate as needed.
• Conduct firewall health checks and performance tuning.
• Troubleshoot network connectivity and firewall-related issues.
• Maintain firewall documentation and SOPs.
• Participate in firewall upgrades and new deployments.
• Conduct firewall rule reviews and cleanups.
• Support IPS and application control features.
• Collaborate with IT teams for integrated firewall solutions.
• Stay updated on emerging firewall threats and technologies.
• Participate in on-call rotation for incidents.

Skills

Networking fundamentals

Troubleshooting

Communication skills

Security incident response

Firewall concepts

Education

Bachelor’s degree in a technical field

TS/SCI with Poly

Tools

Palo Alto

Cisco ASA

Forcepoint

Python scripting

Bash scripting

Job description

CACI is seeking a Network Firewall Engineer to support implementation, configuration, and ongoing maintenance of our firewall infrastructure. You will work with the network security team to ensure perimeter defense is effective and secure.

The role emphasizes hands-on configuration across platforms, monitoring, and incident response, with opportunities to impact the security of critical networks. Travel is up to 10% and TS/SCI with Poly is required.