Network Engineer (Palo Alto) - U.S. Citizenship Required

Position Description:

Ready to take your network engineering skills to the next level? Join CGI, one of the world’s top 5 IT and business consulting firms, and help secure critical infrastructure for the DHS CDM DEFEND program. Your work will directly protect national systems and millions of Americans—all while advancing your career in a global organization of 90, professionals.

At CGI, we offer more than a job:
• Career growth & training opportunities
• Employee ownership through our shareholder program
• Competitive salary & comprehensive benefits
• Work-life balance with a flexible hybrid schedule

This position is located in one of CGI Federal's offices in Fairfax, VA or Lafayette, LA; however, a hybrid working model is acceptable. You will be required to work in a CGI Federal office two days per week.

Your future duties and responsibilities:

As a Network Engineer, you’ll be the go-to expert for designing and securing enterprise networks and AWS cloud environments. You’ll tackle complex challenges and deliver solutions that keep our clients secure and operational.

Your key responsibilities include:
• Protect critical DHS infrastructure by managing Palo Alto firewalls, updating policies, and mitigating threats.
• Ensure secure connectivity through Site-to-Site IPSec VPNs for seamless inter-site communication.
• Optimize performance by monitoring, troubleshooting, and fine-tuning network operations using industry-standard tools.
• Collaborate across teams to integrate network solutions, enhance scalability, and maintain high availability.
• Document with precision—maintain clear, detailed records of configurations, topologies, and SOPs.
• Manage IPAM and DNS while optimizing F5 load-balancing solutions.
• Work across platforms with familiarity in Microsoft and Linux technologies.

Required qualifications to be successful in this role:

• U.S. Citizenship (due to federal contract requirements)
• Ability to obtain and maintain DHS EOD clearance
• 5–8 years of hands-on experience in enterprise network engineering and support
• Expertise with Palo Alto firewalls, Site-to-Site VPNs, and LAN/WAN architectures
• Strong understanding of TCP/IP, routing protocols (BGP, OSPF), and network security principles
• Proven experience troubleshooting network traffic flow in AWS environments

Desired qualifications:
• Experience with automation tools and scripting (e.g., Ansible)
• Knowledge of F5 load balancers and advanced traffic optimization
• Background in designing and implementing network security measures (IDS/IPS)
• Awareness of emerging technologies and cybersecurity trends

CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit-based performance, CGI typically does not hire individuals at or near the top of the range for their role. Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $,.00 - $,.00.

CGI Federal's benefits are offered to eligible professionals on their first day of employment to include:

• Competitive compensation
• Comprehensive insurance options
• Matching contributions through the (k) plan and the share purchase plan
• Paid time off for vacation, holidays and sick time
• Paid parental leave
• Learning opportunities and tuition assistance
• Wellness and well-being programs

#CGIFederalJob
#LI-JK6
#DHSCareers

Skills:

• DNS / DHCP
• English
• Network Engineering
• VPN (Virtual Private Network)