Asks for

The ad says“• DoD 8570/8140 IAT II baseline certification (e.g., CySA+, CND, Security+ CE, CCNA Security).”
The ad says“• Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.”
The ad says“• Automate provisioning, patching, and reporting workflows via PowerShell, REST API, Ansible, and Terraform.”
The ad says“• Familiarity with enterprise backup and DR tools (Veeam, Commvault) in HCI contexts.”
The ad says“• Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.”
The ad says“• Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.”
The ad says“• Identify, design, and deploy security solutions, leveraging both cloud-native and commercial off-the-shelf (COTS) technologies. This includes utilizing security tools such as Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and Endpoint Detection and Response (EDR) solutions to ensure comprehensive security coverage across all infrastructures.”
The ad says“• Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.).”
The ad says“• Experience with Infrastructure as Code (Ansible, Terraform, Git) for provisioning and lifecycle management.”
The ad says“• Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.”
The ad says“• Experience with Infrastructure as Code (Ansible, Terraform, Git) for provisioning and lifecycle management.”
The ad says“• Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.).”
The ad says“• Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.).”
The ad says“• Solid understanding of networking fundamentals (TCP/IP, VLANs, routing, LACP).”
The ad says“• Strong Linux administration knowledge including file systems, permissions, system monitoring, scripting, and RBAC.”
The ad says“• Automate provisioning, patching, and reporting workflows via PowerShell, REST API, Ansible, and Terraform.”
The ad says“• Expertise in PowerShell scripting.”
The ad says“• Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.”
The ad says“• Automate provisioning, patching, and reporting workflows via PowerShell, REST API, Ansible, and Terraform.”
The ad says“• Solid understanding of networking fundamentals (TCP/IP, VLANs, routing, LACP).”
The ad says“• Identify, design, and deploy security solutions, leveraging both cloud-native and commercial off-the-shelf (COTS) technologies. This includes utilizing security tools such as Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and Endpoint Detection and Response (EDR) solutions to ensure comprehensive security coverage across all infrastructures.”
The ad says“• Identify, design, and deploy security solutions, leveraging both cloud-native and commercial off-the-shelf (COTS) technologies. This includes utilizing security tools such as Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and Endpoint Detection and Response (EDR) solutions to ensure comprehensive security coverage across all infrastructures.”
The ad says“• Apply Security Technical Implementation Guides (STIGs) to virtualized systems to maintain compliance with security standards and regulations.”
The ad says“• Solid understanding of networking fundamentals (TCP/IP, VLANs, routing, LACP).”
The ad says“• Automate provisioning, patching, and reporting workflows via PowerShell, REST API, Ansible, and Terraform.”
The ad says“• Familiarity with enterprise backup and DR tools (Veeam, Commvault) in HCI contexts.”
The ad says“• Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.).”
The ad says“• Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.).”
The ad says“• Solid understanding of networking fundamentals (TCP/IP, VLANs, routing, LACP).”
The ad says“• Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.”

Job Title: Cloud Security Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

* * *

The Opportunity:
The Cyber Engineering team is responsible for cybersecurity infrastructure, providing guidance, consultation, research, and technical information on capabilities, connections, limitations, and risks; utilize Senior knowledge to recommend improvements and changes to security posture, capability deployment, focus areas for threats & vulnerabilities.

Hybrid!

Responsibilities:
•            Deploy and manage Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), Firewalls, virtual machines (VMDK, OVF, OVA, and QEMU), including cloud-based images (e.g., AMIs, Azure Virtual Machine Images), virtual networking (OVS, AWS, Azure, VMWare, Nutanix, Virtual Box), and physical networks (CISCO and Arista), as well as forensic tools (Encase, Axiom, etc.).
•            Identify, design, and deploy security solutions, leveraging both cloud-native and commercial off-the-shelf (COTS) technologies. This includes utilizing security tools such as Security Information and Event Management (SIEM), Security Orchestration, Automation and Response (SOAR), and Endpoint Detection and Response (EDR) solutions to ensure comprehensive security coverage across all infrastructures.
•            Monitor cluster health, capacity, and performance; tune settings to optimize resource utilization.
•            Automate provisioning, patching, and reporting workflows via PowerShell, REST API, Ansible, and Terraform.
•            Conduct disaster-recovery drills, validate restore procedures, and maintain job guides/runbooks.
•            Assist with investigation of security incidents; recommend and implement solutions to remediate or mitigate.
•            Apply Security Technical Implementation Guides (STIGs) to virtualized systems to maintain compliance with security standards and regulations.
•            Mentor and train junior team members on HCI and virtualization best practices.

Qualifications:

Required:
•            An active Top Secret with SCI eligibility clearance.
•            7+ years of relevant experience.
•            BA/BS or equivalent years of relevant experience.
•            DoD 8570/8140 IAT II baseline certification (e.g., CySA+, CND, Security+ CE, CCNA Security).
•            Strong Windows Server administration (2016/2019/2022), Active Directory, DNS, DHCP, RDS and GPO management.
•            Strong Linux administration knowledge including file systems, permissions, system monitoring, scripting, and RBAC.
•            Expertise in PowerShell scripting.
•            Familiarity with enterprise backup and DR tools (Veeam, Commvault) in HCI contexts.
•            Solid understanding of networking fundamentals (TCP/IP, VLANs, routing, LACP).
•            Proven capacity-planning, performance-tuning, and troubleshooting skills for HCI clusters.
•            Experience with Infrastructure as Code (Ansible, Terraform, Git) for provisioning and lifecycle management.

Desired:
•            DoD 8570/8140 IAT III baseline certification (e.g., CISSP, CISM, CIS
•            Understanding of the RMF steps and ATO process.
•            Knowledge in Change Management process.
•            Experience in auditing procedures.
•            Experience with Nutanix virtual environments.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$103,800 - $218,100

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

Asks for

Values