Cybersecurity Engineer - Network Security Tools

About the role

CACI is hiring a Cybersecurity Engineer for its Network Security Services - Network Defense team, based in St. Louis. The role develops, deploys and maintains cybersecurity tools that defend the National Geospatial-Intelligence Agency (NGA) networks, supporting the NGA GEOINT mission across multiple networks and locations worldwide. The position requires an active TS/SCI clearance and up to 10% local travel.

Key responsibilities

• Design, implement and deliver task- or project-based defensive cybersecurity solutions for on-premise and cloud environments.
• Deploy, configure and maintain network security tools, keeping software, updates, core services and configurations working to design specifications.
• Develop and maintain network architecture diagrams, inventories and licensing status for the team's capabilities.
• Provide written reports and oral briefings to contract and government leadership, and coordinate issues with stakeholders.
• Evaluate emerging network security technologies and recommend configuration changes and upgrades aligned with industry best practices.
• Use networking protocols and tools such as tcpdump, traceroute, netstat and nslookup to diagnose and resolve issues.

Required profile

• Active TS/SCI clearance (willing and able to obtain and pass a polygraph).
• Bachelor's degree in information technology or a related field.
• At least 5 years of related experience; the desired profile calls for 7+ years of technical experience and 5+ years with large-scale enterprise or global networks.
• DOD 8570 IAT II certification, with ability to obtain and maintain DOD 8570 CSSP Infrastructure Support.
• Ability to work weekends and evenings as needed, and to work independently with little direction.

Required skills

• Linux system administration, including scripting and automation, and system logging analysis.
• Familiarity with DoW PKI, Kerberos, LDAP, Active Directory and authentication (SAML, OAuth).
• Understanding of DoW, DISA and IC standards and processes, and of DoW network architecture.
• Desired: knowledge of NDR and IDS/IPS platforms, packet broker/visibility platforms, packet capture platforms and email security platforms.

What we offer

• Proposed pay range of $75,200 to $158,100, depending on location, contract category, experience and skills.
• Healthcare, wellness, financial, retirement, family support, continuing education and time-off benefits.
• A flexible time-off benefit, learning resources and a culture of integrity and continuous growth.