Team CACI has an exciting and challenging opportunity available for a Sr. Network Engineer supporting a DHS customer’s wide-area (WAN), local-area (LAN) and campus-area (CAN) networks across multiple security domains. CACI will provide a variety of IT services through including cyber security, identity and access management, capacity planning, cloud integration and engineering, field support services, Tier 3/4 support, application deployment and optimization, and operations center support services. CACI will support IT operational environments increasing availability and security for a variety of applications and systems.
What You’ll Get to Do: Ensure the overall health and strong security posture of complex network architectures. The Sr. Network Engineer will be actively involved with all phases of security design, implementation, proactive monitoring, troubleshooting and analysis of firewalls, IDSs, VPNs, security controls and policies. Develops system specifications, architecture designs, integration and test plans, and all relevant documentation. Develops security assessment and mitigation strategies. Maintain compliance with DOD Information Assurance requirements as well as ensuring service performance indicators are met or exceeded.
More About the Role:
Works with both corporate and customer leadership to research, analyze, and implement enterprise-wide network security solutions/capabilities/enhancements to support customer business/mission goals and objectives.
Assists with designs, analyses, tests and implementation of state-of-the-art secure network architectures.
Experience working with enterprise vendors such as Infoblox, Equinix, NetApp, AWS, and Cisco.
Conducts risk assessment and provides recommendations for design.
Conducts encryption technology, penetration and vulnerability analysis of various security technologies, and information technology security research.
Evaluates modern technologies to optimize network efficiency.
In depth knowledge of TCP/IP Protocols.
Functional understanding of network Layer 2 /3 switching and routing protocols.
Functional understanding of diverse set of networked applications and terms requiring application traffic management solutions, including HTTP, HTTPS, SSH, FTP, DHCP, DNS, NTP, ANYCAST services, NAT and others.
DMZ Network infrastructure knowledge including topology, security policies, firewalls and the L2/L3 switch and router infrastructure is required.
Manages software defined networking and ACI Fabric.
Manages WAN, LAN, CAN, and remote network security as well as incident and problem management.
Oversee security infrastructure sustainment, maintenance, and advanced configuration. (firewalls, web gateways, mail gateways, IDS, intrusion detection systems, and management tools.
Oversee the reporting, documentation and investigation of all security related incidents; lead the development and implementation of corrective measures.
Responsible for development and execution of standard operating procedures for security tools.
Proven experience with Agile, sprints and managing and using DevOps concepts
Experience working with a Scrum Master, Daily Scrum meetings, sprints and written deliverables
Familiarity with the following technologies: Cisco 95xx and 6509-E, Cisco C7010/C5596 Nexus Switches, Cisco 55xx ASA Firewalls, DHS Compliance Checks, Software Defined Networking, SD WAN, and Network Monitoring Tools
Strong troubleshooting and analytical skills
Strong critical thinking, complex problem solving, appropriate judgment and decision-making skills
Superior technical aptitude
Effective written and verbal communication skills
Proven communicator and leader. Must be able to work well in an environment facilitating a large group of government and other contractor personnel to achieve a common goal
Flexible – The environment is highly dynamic. You will be expected to keep up with the changing environment while ensuring a high-level of operational effectiveness along with sprint work items and deliverables due the end of each sprint
Team Player – This role is part of a much larger team
These Qualifications Would be Nice to Have:
Relevant DHS focused experience
F5 Certified, CCNA/CCNP, or higher CISCO certifications preferred
SolarWinds, Infoblox and Splunk experience preferred
What We Can Offer You:
We’ve been named a Best Place to Work by the Washington Post.
Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
We offer competitive benefits and learning and development opportunities.
We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.
For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.