Senior Network Engineer (Firewall)

CACI • Ashburn, VA

1d

About The Position

CACI is seeking a Senior Network Engineer to support the Global Mission Operations Support (GMOS) contract and the Department of State. The role supports modernization and maintenance of applications and infrastructure through an integrated IT Service Management approach, helping deliver IT services for mission-critical diplomatic operations across more than 350 global facilities.

The engineer will provide technical leadership for firewall and network security operations, including micro-segmentation platforms, web application firewalls, and Next-Generation Firewalls. The position involves planning and leading major firewall infrastructure initiatives, coordinating with government teams and partner organizations, and mentoring and supervising network security team members. The role requires an active Secret clearance and offers up to 10% local travel.

Requirements

• Bachelor's degree and 8 years of experience in related fields, such as network engineering, network security, firewall administration, cybersecurity, or infrastructure engineering; equivalencies are considered.
• Active Secret clearance.
• Proven experience implementing and managing Next-Generation Firewalls, web application firewalls, and enterprise firewall architectures in large-scale environments.
• Demonstrated expertise in firewall rule design, high-availability configurations, load balancing, and denial-of-service mitigation strategies.
• Leadership experience planning and leading firewall infrastructure projects, serving as a subject matter expert, and supervising network security teams.

Nice To Haves

• Prior experience supporting federal agencies, especially the Department of State.
• Professional certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco CCNP Security, F5 Certified Technology Specialist (F5-CTS), or CISSP.
• Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience supporting more than 300 geographically distributed facilities.
• Experience building and managing micro-segmentation platforms such as Illumio and VMware NSX-T.
• Experience with Firewall Advisory Boards, security policy development, and compliance with federal security frameworks such as NIST and FISMA.

Responsibilities

• Lead implementation and management of micro-segmentation platforms, web application firewalls, and Next-Generation Firewalls across more than 350 global facilities.
• Lead troubleshooting of complex firewall issues, coordinate with DT teams, and facilitate secure connectivity with Government agencies and partner organizations.
• Design, create, implement, and troubleshoot firewall rules for networking devices and application communications, balancing security with business operations.
• Design and implement high-availability solutions, including load balancing and denial-of-service detection and remediation.
• Coordinate with the DT Firewall Advisory Board on rule submissions and ensure compliance with Department of State firewall policies and security standards.
• Lead network component tuning to maintain performance and security in accordance with change-management procedures and best practices.
• Develop firewall standards, procedure manuals, and performance-management procedures that meet DT/EA/CST requirements and federal compliance frameworks.
• Conduct firewall security assessments, vulnerability analysis, and threat modeling to identify and mitigate security risks.
• Serve as a technical expert across project assignments, plan and lead major firewall infrastructure initiatives, mentor team members, and supervise network security operations.

Benefits

• Flexible time off benefit.
• Learning resources and learning and development opportunities.
• Competitive compensation and benefits.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior