Cloud Network Engineer - SOCEUR

Caci•16h ago

BKO GERMANY STUTTGART 70569Hybrid$115.6K–$254.2KFull-timeSenior Level8+ yrs exp

Top focus

Network EngineerCloud EngineerGcp EngineerCloud Security Engineer

Job Title: Cloud Network Engineer - SOCEUR Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular-Long Term Assignment Percentage of Travel Required: Up to 10% Type of Travel: Local * * * The Opportunity: As a CACI Cloud Network Engineer to design, implement, and manage secure, scalable network architectures on Google Cloud Platform (GCP).

This role sits inside the Special Operations Command Europe (SOCEUR) Hybrid Threat Action Platform (HTAP) program team and is responsible for architecting the foundational networking that underpins a mission-critical, multi-level security ecosystem.

The individual will design secure networking boundaries, configure hybrid connectivity for on-premises and tactical systems, and optimize network performance and security. The individual will interact regularly with cybersecurity architects, DevSecOps engineers, and mission owners to ensure robust, resilient, and high-performance connectivity for Allied, partner, and US operations

Responsibilities

Design and implement enterprise-wide cloud and hybrid network architectures on GCP, including VPC design, subnetting, routing, and firewall policies.
Lead the implementation of secure hybrid connectivity solutions, including Cloud Interconnect, dedicated VPNs, and integration with tactical communication systems (e.g., TMN).
Define and manage network infrastructure as code (IaC) using Terraform, enabling automated, repeatable, and auditable network deployments.
Architect and configure multi-layer network security, including VPC Service Controls, Cloud Armor (WAF), and next-generation firewall (NGFW) virtual appliances.
Implement and manage a suite of GCP load balancers (Global, Regional, Internal) to ensure high availability and optimal traffic distribution.
Lead network traffic analysis and bandwidth optimization efforts, using tools like Google Cloud Observability and Network Intelligence Center to diagnose latency and resolve bottlenecks.
Design and manage networking for containerized workloads, including GKE cluster networking, service mesh (e.g., Istio), and pod-to-pod communication policies.
Develop and maintain comprehensive network architecture diagrams and standard operating procedures

Qualifications

Required: Must be a US Citizen possessing an active TS/SCI security clearance. Bachelor's degree in a technical field
equivalent practical experience. DoD 8570.01-M / DoD 8140 IAT Level II (or higher) baseline certification (e.g., CompTIA Security+, CISSP). 8+ years of experience in network engineering, with at least 5+ years focused on designing and managing cloud and hybrid networks on a major cloud platform (GCP preferred). Advanced proficiency in defining network infrastructure as code (IaC) with Terraform. Deep expertise in enterprise networking protocols and concepts, including BGP, IPSec, DNS
load balancing. Hands-on experience with GCP networking products, including VPCs, Cloud Interconnect/VPN, Cloud Armor
VPC Service Controls. Proficiency in at least one scripting language (e.g., Python, Bash) for network automation tasks. Google Cloud Professional Cloud Network Engineer certification. Desired: Master’s degree in computer science or a related field. Google Cloud Professional Cloud Security Engineer certification. Professional-level networking certification such as Cisco CCNP or equivalent. Experience designing networks for air-gapped or limited-connectivity environments and familiarity with Cross-Domain Solutions (CDS). Experience with container networking (Kubernetes/GKE) and service mesh technologies. ITIL v3/v4 Foundations certification Candidate will qualify for:
Moving expenses to relocate household from CONUS to Stuttgart, Germany
Dependent Education
LQA - Living Quarters Allowance - What You Can Expect: A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. An environment of trust. CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. Pay Range : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as
healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. The proposed salary range for this position is: $115,600 - 254,200 USD CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.

Required skills

GCPTerraformBGPIPSecDNSload balancingCloud InterconnectVPNCloud ArmorVPC Service ControlsPythonBashKubernetesGKEIstio