Network Engineer; Palo Alto - U.S. Citizenship

Network Engineer (Palo Alto) - U.S. Citizenship Required

Category: Cyber Security

Main location: United States, Virginia, Fairfax

Alternate Location(s): United States, Louisiana, Lafayette

Position : J

Employment Type: Full Time

Ready to take your network engineering skills to the next level? Join CGI, one of the world’s top 5 IT and business consulting firms, and help secure critical infrastructure for the DHS CDM DEFEND program. Your work will directly protect national systems and millions of Americans—all while advancing your career in a global organization of 90,000 professionals.

• Career growth & training opportunities
• Employee ownership through our shareholder program
• Competitive salary & comprehensive benefits
• Work-life balance with a flexible hybrid schedule

This position is located in one of CGI Federal's offices in Fairfax, VA or Lafayette, LA; however, a hybrid working model is acceptable. You will be required to work in a CGI Federal office two days per week.

As a Network Engineer, you’ll be the go-to expert for designing and securing enterprise networks and AWS cloud environments. You’ll tackle complex challenges and deliver solutions that keep our clients secure and operational.

• Protect critical DHS infrastructure by managing Palo Alto firewalls, updating policies, and mitigating threats.
• Ensure secure connectivity through Site-to-Site IPSec VPNs for seamless inter‑site communication.
• Optimize performance by monitoring, troubleshooting, and fine‑tuning network operations using industry‑standard tools.
• Collaborate across teams to integrate network solutions, enhance scalability, and maintain high availability.
• Document with precision—maintain clear, detailed records of configurations, topologies, and SOPs.
• Manage IPAM and DNS while optimizing F5 load‑balancing solutions.
• Work across platforms with familiarity in Microsoft and Linux technologies.

• U.S. Citizenship (due to federal contract requirements)
• Ability to obtain and maintain DHS EOD clearance
• 5–8 years of hands‑on experience in enterprise network engineering and support
• Expertise with Palo Alto firewalls, Site-to‑Site VPNs, and LAN/WAN architectures
• Strong understanding of TCP/IP, routing protocols (BGP, OSPF), and network security principles
• Proven experience troubleshooting network traffic flow in AWS environments

• Experience with automation tools and scripting (e.g., Ansible)
• Knowledge of F5 load balancers and advanced traffic optimization
• Background in designing and implementing network security measures (IDS/IPS)
• Awareness of emerging technologies and cybersecurity trends

CGI is required by law in some jurisdictions to include a reasonable estimate of the compensation range for this role. The determination of this range includes various factors not limited to skill set, level, experience, relevant training, and licensure and certifications. To support the ability to reward for merit‑based performance, CGI typically does not hire individuals at or near the top of the range for their role.

Compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range for this role in the U.S. is $ - $.

• Competitive compensation
• Comprehensive insurance options
• Matching contributions through the 401(k) plan and the share purchase plan
• Paid time off for vacation, holidays and sick time
• Paid parental leave
• Learning opportunities and tuition assistance
• Wellness and well‑being programs

• DNS / DHCP
• English
• Network Engineering
• VPN (Virtual Private Network)

Together, as owners, let’s turn meaningful insights into action.

Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you’ll reach your full potential because…

You are invited to be an owner from day 1 as we work together to bring our Dream to life. That’s why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company’s strategy and…