Skip to main content
CACI International logo

Senior Firewall Engineer

CACI International

North Springfield, VAFull-time$75–158K/yrSeen 3mo agoSeen in employer's feed 4 days ago

See where you stand before you apply. No sign-up to start.

You apply on the posting's application page, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$75–158K/yr
Location
North Springfield, VA
Schedule
Full-time
Work Authorization
Not specified

Olive focuses on jobs in the United States, including remote roles you can work from there.

Requirements

Credentials this posting asks for.

DoD 8140.01 And DoD 8570.01-M IAT Level II Certification, requiredCSSP Infrastructure Support Certification, requiredTS/SCI clearance, requiredBachelor's degree, required

Job overview

CACI International is hiring a Senior Firewall Engineer. The Senior Firewall Engineer will join CACI’s TCS Network Security Services team, collaborating with corporate and customer leadership to research, analyze, and implement enterprise‑wide network security solutions that support mission goals. The role involves designing, testing, and deploying secure network architectures, conducting risk assessments, managing WAN/LAN/CAN security, and overseeing incident response and documentation.

Key focus areas include Assist in designing, analyzing, testing, and implementing secure network architectures., Conduct risk assessments and provide design recommendations., and Manage WAN, LAN, CAN, and remote network security, including incident and problem management..

Important skills include Palo Alto, Juniper, Cisco, F5 Load Balancer, FireEye, and Cisco FTD.

Skills & qualifications

RequiredNice to have

Skills

Palo Alto, requiredJuniper, requiredCisco, requiredF5 Load Balancer, requiredFireEye, requiredCisco FTD, requiredUnix, requiredRHELS OS, requiredWindows Enterprise AD, requiredVMware, requiredNetwork Security, requiredRisk Assessment, requiredSecurity Architecture Design, requiredStandard Operating Procedures Development, required

Qualifications

Active TS/SCI, requiredU.S. Government Polygraph, requiredBA/BS Degree in IT or Cybersecurity, requiredMinimum 5 Years Network Security Experience, requiredDoD 8140.01 and DoD 8570.01-M IAT Level II Certification, requiredCSSP Infrastructure Support Certification, requiredTravel Up to 10%, required

Full job description

Job Title: Senior Firewall Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local


The Opportunity

As a member of the TCS Network Security Services (NSS) team, you will work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives.

Responsibilities

  • Assist with design, analysis, testing, and implementation of state-of-the-art secure network architectures.

  • Conduct risk assessment and provide design recommendations.

  • Manage WAN, LAN, CAN, and remote network security as well as incident and problem management.

  • Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools).

  • Oversee the reporting, documentation, and investigation of all security-related incidents; lead the development and implementation of corrective measures.

  • Develop and execute standard operating procedures (SOPs) for security tools.

  • Evaluate and report on new network Security technologies to enhance the capabilities of the network.

  • Act as liaison to the contract and customer management, and government Designated Approving Authority (DAA) regarding network security status, policies, and procedures.

Qualifications

Required:

  • Active TS/SCI (Post-hire: Must be able to successfully pass/maintain a U.S. Government Polygraph)

  • BA/BS Degree in a related field (IT, Cybersecurity, and other related fields) Additional experience may be considered in lieu of a degree

  • Minimum 5 years of related technical experience in Network Security with large-scale enterprise/global networks in a high-paced, diverse environment.

  • DoD 8140.01 and DoD 8570.01-M IAT Level II compliant certification (current)

  • Post-hire: Must be able to successfully obtain/maintain CSSP Infrastructure Support certification within 120 days of start date

  • Experience with Firewalls (e.g. Palo Alto, Juniper, Cisco, etc.)

  • Experience with Routers/Switches (e.g. Juniper, Cisco, etc.)

  • Experience with Intrusion Detection Systems/IDS Products (e.g. FireEye, F5 Load Balancer, Cisco FTD, etc.)

  • Experience with Unix, RHELS OS, Windows Enterprise AD, VMware

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range :

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$75,200-$158,100

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

How this job compares

Set against the 444 open Network Security Engineer jobs on Olive Jobs, counted November 14, 2026.

Pay
  • This posting$75–158K/yr
  • Virginia median$105–176K/yr30 salary ranges
  • US median$126–180K/yr375 salary ranges

This range's midpoint, $117K, is 21% below the Virginia median midpoint ($147K) — in the middle half of Network Security Engineer salary ranges in Virginia.

Openings
Olive Jobs lists 36 open Network Security Engineer jobs in Virginia and 444 across the US. 4% of them nationwide are listed as remote or flexible.
Hiring the most in Virginia
Experience
This posting asks for at least 5 years of experience; Network Security Engineer postings that state a minimum ask for 7 years at the median (421 postings).
Education
This posting asks for a bachelor's degree; 86 of the 444 open Network Security Engineer jobs (19%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 14, 2026. Figures based on too few postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.