Network Engineer

Job Title: Network Engineer Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: None Employee Type: Regular Percentage of Travel Required: Up to 10% Type of Travel: Local * * * The Opportunity: CACI is currently looking for a Senior Network Engineer with agile methodology experience to join our BEAGLE (Border Enforcement Applications for Government Leading-Edge Information Technology) Agile Solution Factory (ASF) Team supporting the Customs and Border Protection (CBP) client located in Northern Virginia! As a member of the BEAGLE ASF Team, you will support the men and women charged with safeguarding the American people and enhancing the Nation’s safety, security, and prosperity. CBP agents and officers are on the front lines, every day, protecting our national security by combining customs, immigration, border security, and agricultural protection into one coordinated and supportive activity. In this role, you will be a key technical driver in optimizing network performance for critical border security applications. Your expertise will be focused on securing and managing high-availability servers within the Demilitarized Zone (DMZ), optimizing the network infrastructure for low-latency Full-Motion Video (FMV) streaming, and ensuring resilient connectivity for remote and disconnected tactical field clients operating at the tactical edge. Responsibilities: ·       DMZ & Edge Architecture: Design, implement, secure, and maintain the network architecture for external-facing systems within the DMZ, ensuring robust security postures, proper zoning, and high availability using F5 Load Balancers and Next-Generation Firewalls (NGFW). ·       F5 BIG-IP Network & Application Services: Provide comprehensive end-to-end administration, engineering, and lifecycle management of F5 BIG-IP solutions, encompassing LTM with custom iRules scripting, APM, ASM/Advanced WAF, GTM, and AFM to ensure application availability, performance, security, and access control. ·       Video Streaming Optimization: Engineer, monitor, and fine-tune network paths, Quality of Service (QoS), and routing protocols (multicast/unicast) to support seamless, low-latency live Full-Motion Video (FMV) streaming to tactical operators. ·       Remote & Disconnected Client Support: Build and maintain secure, highly resilient network pathways (including VPNs, SD-WAN, and cellular/satellite backup) designed to support remote field users and disconnected edge clients who experience intermittent, low-bandwidth, or high-latency network conditions. ·       Agile Team Collaboration: Serve as a collaborative member of an Agile Scrum team, translating business requirements into technical network designs, hardware/software solutions, and automated network updates in short sprints. ·       Infrastructure Management: Design, configure, and troubleshoot routing and switching for test environments, including connections back to the core CBP network, Active Directory, and endpoint configuration managers. ·       Technical Documentation: Contribute to Basis of Estimate (BOE) and Bill of Materials (BOM) buildups, and support the creation/update of critical documentation including Interconnection Security Agreements (ISA), System Design Documents (SDD), and System Maintenance Plans (SMP). ·       Tier IV Support: Provide Tier IV escalation support for CBP’s Enterprise Wide Area Network (WAN) Infrastructure, troubleshooting complex routing across highly secure, multi-tenant MPLS networks. ·       Mentorship: Provide technical guidance, advice, and mentoring to junior and mid-level network team members. Qualifications: ·       Citizenship & Clearance: Must be a U.S. Citizen with the ability to pass a CBP background investigation. Criteria include, but are not limited to: o   3-year check for felony convictions o   1-year check for illegal drug use o   1-year check for misconduct such as theft or fraud ·       Professional Experience: 5–7+ years of related network engineering experience supporting complex, enterprise-level environments. ·       Education: College degree (B.S.) in Computer Science, Network Engineering, Information Management Systems, or a related discipline (equivalent experience accepted in lieu of degree). ·       Location: Must be available to work a hybrid schedule with an on-site requirement in Ashburn, VA. You are good at: ·       Secure Infrastructure Design: Hands-on experience configuring Cisco Next-Generation Firewalls (NGFWs), Cisco Firepower, F5 Load Balancers (LTM/GTM), and establishing secure DMZ zone transitions. ·       Video & Media Routing: Optimizing enterprise-wide networks for heavy-bandwidth streaming applications, including multicast routing (PIM, IGMP), traffic shaping, and complex QoS configurations. ·       Cisco Routing & Switching: Advanced configuration and troubleshooting of Cisco routers (ASRs, ISRs, Generation 2, and 1900-7600 series) and switches to a CCNP level. ·       Core Protocol Expertise: Expert-level knowledge of IP routing (IPv4/IPv6), BGP (required), EIGRP, OSPF, and Virtual Routing and Forwarding (VRF) in highly secure, multi-tenant network environments. ·       Edge Connectivity: Setting up secure remote access solutions, Site-to-Site VPNs, DMVPN, or SD-WAN technologies for remote and mobile teams. ·       Performance Monitoring & Diagnostics: Utilizing advanced network analysis tools such as Riverbed SteelCentral, NetScout, Gigamon, Cisco Prime, and Wireshark to isolate packet loss, high latency, and network bottlenecks. ·       Collaborative Mindset: Working with minimal supervision while communicating effectively with application developers, systems engineers, and non-technical customer stakeholders. Desired: ·       Prior experience working with Customs and Border Protection (CBP) networks and systems. ·       Industry certifications such as CCNP Enterprise , CCIE , or F5 Certified Technology Special