Network Engineer

When disasters strike, FEMA’s network and hosting infrastructure must scale instantly, remain resilient under pressure, and securely connect responders, survivors, and partners across the nation. As a Network Engineer on our FEMA ITSA 3.0 program, you will evaluate the technical foundation that enables mission-critical emergency management operations-assessing cloud, on-premises, and hybrid environments to identify modernization opportunities that reduce risk, improve performance, and enhance mission delivery.

You’ll dive deep into FEMA’s hosting architectures, network topologies, and connectivity patterns to understand how infrastructure choices impact scalability, resiliency, security, and operational efficiency. Your technical assessments will inform strategic decisions on cloud migration, network modernization, disaster recovery enhancement, and infrastructure consolidation-ensuring FEMA’s technology foundation can support both steady-state operations and surge response during national emergencies. This is an opportunity to apply your infrastructure expertise to one of the federal government’s most critical missions, helping shape the technical architecture that supports disaster preparedness, response, recovery, and mitigation nationwide.

Responsibilities:

Hosting Environment & Architecture Assessment:

• Evaluate hosting models across the portfolio: cloud (AWS, Azure, hybrid-cloud), on-premises data centers, and colocation environments
• Assess scalability characteristics and capacity headroom for surge operations during disaster response
• Analyze availability architectures, redundancy configurations, and resiliency patterns
• Evaluate environment complexity and operational support models; recommend simplification and standardization opportunities
• Document hosting infrastructure dependencies and technical debt that constrains modernization

Network Topology & Connectivity Analysis:

• Inventory and document network topologies including LAN/WAN architectures, routing protocols, and network segmentation strategies
• Assess VPN implementations, firewall configurations, proxy architectures, and perimeter security controls
• Evaluate load balancing strategies, traffic flow patterns, and network performance optimization
• Analyze connectivity between FEMA headquarters, regional offices, field operations, and external partner systems
• Identify network bottlenecks, latency issues, and bandwidth constraints affecting mission performance

Performance, Scalability & Resiliency Evaluation:

• Assess system scalability under both steady-state and disaster surge conditions
• Identify performance bottlenecks that degrade user experience or limit operational capacity
• Evaluate availability targets and actual uptime performance against mission requirements
• Analyze resiliency patterns and single points of failure that pose operational risk
• Document latency issues, throughput constraints, and capacity planning gaps

Security Architecture & Access Control Analysis:

• Contribute to Identity and Access Management (IAM) and Multi-Factor Authentication (MFA) enforcement assessments
• Support privileged access architecture reviews and least-privilege implementation analysis
• Assess logging and monitoring maturity from an infrastructure and network perspective
• Evaluate security segmentation, micro-segmentation opportunities, and zero-trust architecture readiness
• Document security controls, network security posture, and vulnerability remediation status

Required:

• Bachelor’s degree and 7+ years of network and infrastructure engineering experience across hybrid cloud and on-premises environments
• Hands-on technical expertise with routing and switching protocols, firewall architectures, VPN technologies, and load balancing strategies
• Demonstrated experience with cloud networking in AWS and/or Azure environments including VPC/VNet design, transit gateways, Direct Connect/ExpressRoute, and cloud-native networking services
• Proven ability evaluating continuity of operations, disaster recovery architectures, and performance tuning in mission-critical federal or enterprise environments
• Strong analytical skills with the ability to identify infrastructure risks, performance bottlenecks, and modernization opportunities
• Excellent technical documentation and diagramming skills; ability to communicate complex architectures clearly
• Experience validating technical configurations and collaborating with engineering and operations teams
• Ability to obtain DHS Entry on Duty (EOD) clearance

Desired:

• Familiarity with DHS enterprise network standards, Trusted Internet Connection (TIC) requirements, and EINSTEIN program
• Experience with zero-trust architecture principles, software-defined networking (SDN), and network security frameworks
• Knowledge of NIST cybersecurity frameworks (SP 800-53, 800-207 Zero Trust) as applied to network architecture
• Background documenting complex technical environments for executive audiences and non-technical stakeholders
• Experience supporting federal IT modernization programs, cloud migration assessments, or infrastructure rationalization initiatives
• AWS or Azure networking certifications (AWS Certified Advanced Networking, Azure Network Engineer Associate)
• Cisco, Juniper, or other vendor networking certifications (CCNP, JNCIP, or equivalent)
• Familiarity with Infrastructure as Code (IaC), automation, and DevSecOps practices
• Understanding of federal compliance requirements (FedRAMP, FISMA, NIST RMF) as they relate to infrastructure and

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$75,200-$158,100

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.