CSES III - Firewall Engineer

Company: CACI
Location: Springfield
Posted on: April 1, 2026

Job Description:

Job Title: CSES III - Firewall Engineer Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular Percentage of Travel Required: Up to 25% Type of Travel: Local * * * The Opportunity: TCS has an exciting and challenging opportunity available for a CSES III - Firewall Engineer supporting an Intelligence Community customer’s wide-area (WAN), local-area (LAN) and campus-area (CAN) networks across multiple security domains. Ensure the overall health and strong security posture of complex network architectures. The Firewall Engineer will be actively involved with all phases of security design, implementation, proactive monitoring, troubleshooting and analysis of firewalls, IDSs, F5 Load Balancers, VPNs, security controls and policies. Develops system specifications, architecture designs, integration and test plans, and all relevant documentation. Develops security assessment and mitigation strategies. Maintain compliance with DOD Information Assurance requirements as well as ensuring service performance indicators are met or exceeded. Responsibilities: Work with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives. Assists with designs, analyses, tests and implementation of state-of-the-art secure network architectures. Conducts risk assessment and provides recommendations for design. Manage WAN, LAN, CAN, and remote network security as well as incident and problem management. Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, F5 load balancers, web gateways, mail gateways, IDS, and management tools). Oversee the reporting, documentation and investigation of all security related incidents; lead the development and implementation of corrective measures. Responsible for development and execution of standard operating procedures for security tools. Evaluate and report on new network Security technologies to enhance capabilities of the network. Act as liaison to the contract and customer management, and government Designated Approving Authority (DAA) with regard to all network security status, policies, and procedures. Qualifications: Required Bachelor’s degree in Computer Science or related field DOD 8570 IAT Level III certification. Must obtain a CSSP Infrastructure Support certification within 6 months of date of hire. Ability to work independently with little direction and guidance TS/SCI - Ability to work weekends and evening hours as needed - Excellent writing and communication skills, including the ability to develop analytical documents and present oral presentations to senior/executive management Proficient is MS Office suite – Visio, Word, Excel, PowerPoint, and Project Travel up to 15% of the time CONUS, maybe occasional OCONUS 8 years related technical experience in Network Security 4 years experience with large-scale enterprise/global networks in a high paced diverse environment Understanding and experience with the DoD Architecture Framework and other key DoD network architecture and strategic planning instructions. Expert knowledge of IP services Experience in providing status reports and products to senior management and customers Experience with Juniper SRX, Palo Alto Firewall, F5 Load Balancer, Cisco FTD/ASA Experience with plans, designs, and evaluations of security systems and architectures. Experience with Unix, RHELS OS, Windows Enterprise AD architecture and VMWare virtualization experience Desired Master’s degree in Computer Science or related field - Systems Security Certified Practitioner (SSCP) or CYSA CCNP Security and/or CCNA Security certification - ITIL certification - Security - What You Can Expect: A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. Pay Range : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The proposed salary range for this position is: $86,600 - $181,800 CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

Keywords: CACI, Richmond , CSES III - Firewall Engineer, IT / Software / Systems , Springfield, Virginia