SASE / Zero Trust Engineer

Licensed sponsor London Full-time Posted 3 hours ago

About CACI

From our headquarters in London, we’re busy empowering organisations to make bold, strategic moves with the power of data and technology. Founded in 1975, our operations take place from multiple offices across the UK, Europe and India with over 1600 full-time employees and an annual turnover of £179m.

Our expertise spans industries, from retail and education to public sector and transport – delivering intelligent solutions that drive progress and create measurable impact. Whether it’s business intelligence, customer marketing, cloud infrastructure, cybersecurity, critical national infrastructure or data management, our approach is never one-size-fits-all.

We don’t just deliver solutions; we build for the tomorrow’s world, all while fostering a culture that allows employees to be their authentic selves and succeed in their careers.

About Network Services

CACI Network Services is a rapidly expanding specialist IT and Networks consultancy offering a wide variety of opportunities to work within challenging and exciting environments with our major clients in Global Media, Banking, Government, Telecoms & Utilities.

Key responsibilities

Zero Trust & Network Security Engineering

Partner with internal stakeholders and technology vendors to evaluate, select, and implement Zero Trust security solutions.
Design and engineer scalable, resilient, and secure enterprise network and security architectures.
Collaborate across Network Engineering, Security Engineering, IAM, Cloud, EUC, and Operations teams to deliver security transformation initiatives.
Contribute to technical strategy, standards, reference architectures, and design patterns.
Deliver solutions tailored to internal business requirements. Articulate design rationale, flexibly adapt solutions, and iterate designs when required.
Develop High-Level Designs (HLD), Low-Level Designs (LLD), migration plans, operational procedures, and architecture documentation.
Support vendor evaluations, Proof of Concepts (PoCs), pilot deployments, and production rollouts.
Lead technical assessments, architecture reviews, root cause analysis, and engineering recommendations.
Design, deploy, and operate Palo Alto, Fortinet or Cisco NGFW platforms and their respective (Cloud) Manager, (Strata Cloud, FortiManager, Cisco Security Cloud)
Design and implement SASE/SSE solutions for enterprise-scale deployments.
Implement centralized security management, policy governance, logging, monitoring, and reporting using the Vendors ecosystem or solutions like Tufin or Algosec

Network Security & Segmentation

Design and implement on-premises Zero Trust Enforcement Points (NGFW)
Develop segmentation and micro-segmentation strategies across data centres, campuses, cloud, and branch environments.
Define secure traffic flows and trust boundaries.
Support migration from traditional network-centric security models to Zero Trust architectures.

Enterprise Networking

Routers, switches, LAN/WAN design and engineering.
VPN technologies, IPSec, TLS encryption, and NAC integration.
Hands-on experience with:
Cisco ASR / ISR / Catalyst 8k
Cisco Catalyst and Nexus platforms
Arista switching platforms
Strong experience with:
BGP
OSPF
EVPN
VXLAN
MPLS
VRF-based segmentation
Deep understanding of Layer 2 and Layer 3 network technologies.

Security & Integration

Experience integrating network security solutions with

Microsoft Entra ID
Active Directory
Cisco ISE / NAC platforms
EDR/XDR solutions
SIEM platforms
ServiceNow
Cloud platforms (Azure, AWS, GCP)

Core skills, knowledge and experience required

8+ years of experience in Network Security Engineering and Enterprise Networking.
Demonstrated experience designing and implementing:
SASE/SSE
ZTNA
Network Segmentation
Identity-Based Access Controls
Enterprise Firewall architectures
Strong understanding of Zero Trust Architecture principles.
Ability to produce technical assessments, architecture reviews, PoCs, migration strategies, and engineering documentation.
Strong troubleshooting and root cause analysis capabilities.
Excellent written and verbal communication skills.

Desirable skills (not essential)

Palo Alto, Fortinet certification
CCNP Enterprise / Security
CCIE Enterprise Infrastructure / Security
CISSP
Experience within large-scale financial services environments.
Knowledge of NIST Zero Trust Architecture, DORA, NIS2, and modern cybersecurity frameworks.

Flexibility

The key to our success is our teamwork and collaboration. We take a hybrid approach – working remotely and coming into the office depending on the business demand and collaboration required as part of the delivery process.

Equal opportunities

CACI is proud to be an equal employer. Embracing the diversity of our people, we are on a journey to build a truly inclusive work environment where no one is treated less favorably due to ethnic origin, age, gender, veteran status, religion or belief, sexual orientation, marital status, and disability or health condition, actively working to prevent discrimination.