Firewall Engineer II

CACI International•Arnold, MO

2d•$63,300 - $129,700

About The Position

CACI is seeking TS/SCI-cleared Firewall Engineers to join its Transport & Cybersecurity Services (TCS) Network Security Services (NSS) team. The position supports a long-term prime contract serving the National Geospatial-Intelligence Agency’s GEOINT mission. Team members help design, develop, procure, implement, operate, sustain, and enhance NGA networks and cybersecurity capabilities. The role works with corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions and enhancements that support customer business and mission goals. The opportunity may be based in St. Louis, Missouri, and requires up to 10% local travel.

Requirements

Current TS/SCI clearance.
Ability to successfully pass and maintain a U.S. Government polygraph after hire.
Bachelor’s degree and typically 2–8 years of related technical experience in network security with large-scale enterprise or global networks in a fast-paced, diverse environment; additional experience may be considered instead of a degree.
Current DoD 8140.01 and DoD 8570.01-M IAT Level II-compliant certification.
Ability to obtain and maintain CSSP Infrastructure Support certification within 120 days of the start date.
Experience with firewalls such as Palo Alto, Juniper, or Cisco.
Experience with routers and switches such as Juniper or Cisco.
Experience with intrusion detection systems or IDS products such as FireEye, F5 Load Balancer, or Cisco FTD.
Experience with Unix, RHELS OS, Windows Enterprise AD, and VMware.

Responsibilities

Assist with the design, analysis, testing, and implementation of secure network architectures.
Conduct risk assessments and provide design recommendations.
Manage WAN, LAN, CAN, and remote network security, as well as incident and problem management.
Oversee security infrastructure sustainment, maintenance, and advanced configuration, including firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools.
Oversee reporting, documentation, and investigation of security-related incidents, and lead the development and implementation of corrective measures.
Develop and execute standard operating procedures for security tools.
Evaluate and report on new network security technologies to enhance network capabilities.
Act as a liaison to contract and customer management and the government Designated Approving Authority regarding network security status, policies, and procedures.