Firewall Engineer II

CACI•Arnold, MO

About The Position

CACI's Transport & Cybersecurity Services (TCS) program is seeking TS/SCI-cleared Firewall Engineers for its Network Security Services (NSS) team. The role supports a long-term CACI prime contract serving the National Geospatial-Intelligence Agency’s GEOINT mission. Team members work with corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions, capabilities, and enhancements that support customer business and mission goals. The position may be based in St. Louis, Missouri, and requires up to 10% local travel.

Requirements

Current TS/SCI clearance.
Must be able to successfully pass and maintain a U.S. Government polygraph after hire.
BA/BS degree and typically two to eight years of related technical experience in network security with large-scale enterprise or global networks in a high-paced, diverse environment; additional experience may be considered instead of a degree.
Current DoD 8140.01 and DoD 8570.01-M IAT Level II-compliant certification.
Must be able to successfully obtain and maintain CSSP Infrastructure Support certification within 120 days of the start date.
Experience with firewalls, such as Palo Alto, Juniper, or Cisco.
Experience with routers and switches, such as Juniper or Cisco.
Experience with intrusion detection systems and IDS products, such as FireEye, F5 Load Balancer, or Cisco FTD.
Experience with Unix, RHELS OS, Windows Enterprise AD, and VMware.

Responsibilities

Assist with the design, analysis, testing, and implementation of secure network architectures.
Conduct risk assessments and provide design recommendations.
Manage WAN, LAN, CAN, and remote network security, as well as incident and problem management.
Oversee security infrastructure sustainment, maintenance, and advanced configuration, including firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools.
Oversee the reporting, documentation, and investigation of security-related incidents, and lead the development and implementation of corrective measures.
Develop and execute standard operating procedures (SOPs) for security tools.
Evaluate and report on new network security technologies to enhance network capabilities.
Act as a liaison to contract and customer management and the government Designated Approving Authority (DAA) regarding network security status, policies, and procedures.