Job Title: Senior Network Engineer (Firewall)
Job Category: Information Technology
Time Type: Full time
Minimum Clearance Required to Start: Secret
Employee Type: Regular
Percentage of Travel Required: Up to 10%
Type of Travel: Local
* * *
The Opportunity:
CACI is seeking a Senior Network Engineer (Firewall) for the Global Mission Operations Support (GMOS) contract, supporting the Department of State. This role offers a unique opportunity to enhance national security through advanced IT solutions. You will collaborate with experienced professionals in an innovative environment, guiding a high-performing team to deliver excellence. The GMOS contract aims to provide world-class IT support by modernizing and maintaining applications and infrastructure using an integrated IT Service Management approach. Join us to make a meaningful impact on a program of national importance.
Responsibilities:
Lead implementation and management of micro-segmentation platforms, web application firewalls and Next-Generation Firewalls (NGFWs) across 350+ global facilities supporting mission-critical diplomatic operations
Lead troubleshooting of complex firewall issues, coordinating with DT teams and facilitating secure connectivity with Government agencies and partner organizations
Lead design, creation, implementation, and troubleshooting of Firewall Rules for networking devices and application communications, ensuring security while enabling business operations
Design and implement comprehensive high-availability solutions including load balancing, denial of service detection and remediation leveraging modern network security technologies
Lead coordination with DT Firewall Advisory Board for rule submissions, ensuring compliance with Department of State firewall policies and security standards
Lead network component tuning activities to maintain optimum performance and security posture in accordance with change management procedures and best practices
Develop comprehensive firewall standards, procedures manuals, and performance management procedures meeting DT/EA/CST requirements and federal compliance frameworks
Conduct firewall security assessments, vulnerability analysis, and threat modeling to proactively identify and mitigate potential security risks
Function as a technical expert across multiple project assignments, planning and leading major firewall infrastructure initiatives while mentoring team members and supervising network security operations
Qualifications:
Required –
Bachelor's degree + 8 years of experience in related fields, such as network engineering, network security, firewall administration, cybersecurity, or infrastructure engineering; equivalencies considered.
Active Secret Clearance
Proven experience implementing and managing Next-Generation Firewalls (NGFWs), web application firewalls, and enterprise firewall architectures for large-scale environments
Demonstrated expertise in firewall rule design, high-availability configurations, load balancing, and denial of service (DoS) mitigation strategies
Excellent leadership abilities with proven experience planning and leading firewall infrastructure projects, functioning as a subject matter expert, and supervising network security teams
Desired –
Prior experience supporting federal agencies, especially the Department of State
Professional certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco CCNP Security, F5 Certified Technology Specialist (F5-CTS), or CISSP
Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience supporting 300+ geographically distributed facilities
Demonstrated experience building and managing micro-segmentation platforms such as Illumio and VMware NSX-T
Experience with Firewall Advisory Boards, security policy development, and compliance with federal security frameworks (NIST, FISMA)
Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience…