Skip to main content
CACI International logo

Senior Network Engineer (Firewall)

CACI International

Ashburn, VAFull-time$104–218K/yrSeen 2 days agoSeen in employer's feed 2 days ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$104–218K/yr
Location
Ashburn, VA
Schedule
Full-time
Work Authorization
Not specified

Olive lists jobs from US employers, including remote roles you can work from the United States.

Requirements

Credentials this posting asks for.

Secret clearance, required

Job overview

CACI seeks a Senior Network Engineer (Firewall) to support the Department of State’s Global Mission Operations Support contract. The role leads firewall infrastructure initiatives across global facilities, including implementation, troubleshooting, security assessments, and high-availability design. The engineer also develops standards and procedures, coordinates firewall rule submissions, and mentors team members. A bachelor’s degree and eight years of related experience are required, with equivalencies considered; an active Secret clearance is required.

Skills & qualifications

RequiredNice to have

Skills

Next-Generation Firewalls, requiredWeb Application Firewalls, requiredEnterprise Firewall Architecture, requiredFirewall Rule Design, requiredHigh-Availability Configurations, requiredLoad Balancing, requiredDoS Mitigation, requiredLeadership, requiredFirewall Infrastructure Project Leadership, requiredNetwork Security Team Supervision, requiredFederal Agency Support, nice to havePalo Alto Networks PCNSE, nice to haveCisco CCNP Security, nice to haveF5-CTS, nice to haveCISSP, nice to haveSoftware-Defined Networking, nice to haveNetwork Segmentation, nice to haveMicro-Segmentation Platforms, nice to haveIllumio, nice to haveVMware NSX-T, nice to haveFirewall Advisory Boards, nice to haveSecurity Policy Development, nice to haveNIST, nice to haveFISMA, nice to have

Qualifications

Bachelor's Degree or Equivalent, required8 Years Related Experience, requiredActive Secret Clearance, required300+ Facility Support, nice to have

Benefits

Paid Time Off
401(k) Match
Tuition Assistance

Full job description

Job Title: Senior Network Engineer (Firewall)

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local


The Opportunity:

CACI is seeking a Senior Network Engineer (Firewall) for the Global Mission Operations Support (GMOS) contract, supporting the Department of State. This role offers a unique opportunity to enhance national security through advanced IT solutions. You will collaborate with experienced professionals in an innovative environment, guiding a high-performing team to deliver excellence. The GMOS contract aims to provide world-class IT support by modernizing and maintaining applications and infrastructure using an integrated IT Service Management approach. Join us to make a meaningful impact on a program of national importance.

Responsibilities:

  • Lead implementation and management of micro-segmentation platforms, web application firewalls and Next-Generation Firewalls (NGFWs) across 350+ global facilities supporting mission-critical diplomatic operations

  • Lead troubleshooting of complex firewall issues, coordinating with DT teams and facilitating secure connectivity with Government agencies and partner organizations

  • Lead design, creation, implementation, and troubleshooting of Firewall Rules for networking devices and application communications, ensuring security while enabling business operations

  • Design and implement comprehensive high-availability solutions including load balancing, denial of service detection and remediation leveraging modern network security technologies

  • Lead coordination with DT Firewall Advisory Board for rule submissions, ensuring compliance with Department of State firewall policies and security standards

  • Lead network component tuning activities to maintain optimum performance and security posture in accordance with change management procedures and best practices

  • Develop comprehensive firewall standards, procedures manuals, and performance management procedures meeting DT/EA/CST requirements and federal compliance frameworks

  • Conduct firewall security assessments, vulnerability analysis, and threat modeling to proactively identify and mitigate potential security risks

  • Function as a technical expert across multiple project assignments, planning and leading major firewall infrastructure initiatives while mentoring team members and supervising network security operations

Qualifications:

Required –

  • Bachelor's degree + 8 years of experience in related fields, such as network engineering, network security, firewall administration, cybersecurity, or infrastructure engineering; equivalencies considered.

  • Active Secret Clearance

  • Proven experience implementing and managing Next-Generation Firewalls (NGFWs), web application firewalls, and enterprise firewall architectures for large-scale environments

  • Demonstrated expertise in firewall rule design, high-availability configurations, load balancing, and denial of service (DoS) mitigation strategies

  • Excellent leadership abilities with proven experience planning and leading firewall infrastructure projects, functioning as a subject matter expert, and supervising network security teams

Desired –

  • Prior experience supporting federal agencies, especially the Department of State

  • Professional certifications such as Palo Alto Networks Certified Network Security Engineer (PCNSE), Cisco CCNP Security, F5 Certified Technology Specialist (F5-CTS), or CISSP

  • Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience supporting 300+ geographically distributed facilities

  • Demonstrated experience building and managing micro-segmentation platforms such as Illumio and VMware NSX-T

  • Experience with Firewall Advisory Boards, security policy development, and compliance with federal security frameworks (NIST, FISMA)

  • Knowledge of Software-Defined Networking (SDN), network segmentation strategies, and experience supporting 300+ geographically distributed facilities

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range :

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$103,800 - $218,100

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

How this job compares

Set against the 4,184 open Network Engineer jobs on Olive Jobs, counted November 10, 2026.

Pay
  • This posting$104–218K/yr
  • Virginia median$120–183K/yr317 salary ranges
  • US median$113–187K/yr3,274 salary ranges

This range's midpoint, $161K, is 7% above the Virginia median midpoint ($150K) — in the middle half of Network Engineer salary ranges in Virginia.

Openings
Olive Jobs lists 397 open Network Engineer jobs in Virginia and 4,184 across the US. 5% of them nationwide are listed as remote or flexible.
Hiring the most in Virginia
Experience
This posting asks for at least 8 years of experience; Network Engineer postings that state a minimum ask for 5 years at the median (3,614 postings).
Education
1,164 of the 4,184 open Network Engineer jobs (28%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 10, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.