Network Zero Trust Engineer
About The Position
This remote opportunity involves travel. The Network Zero Trust Engineer supports deployment, integration, and maintenance of secure enterprise network infrastructure, with hands-on configuration, testing, troubleshooting, and implementation of Cisco SD-WAN, network security technologies, and Zero Trust capabilities. The role is intended for someone with practical Cisco SD-WAN experience and experience with Palo Alto Networks or F5 technologies in enterprise or DoD network environments. The engineer supports network security integrations and Zero Trust controls, deployment planning and testing, site readiness assessments, and operational documentation. The role also involves coordinating with network, cybersecurity, infrastructure, and engineering teams, and may include network automation and configuration tasks.
Requirements
- At least 8 years of experience in enterprise or Department of Defense (DoD) network engineering.
- At least 2 years of hands-on Cisco SD-WAN experience in combination with Palo Alto Networks or F5 technologies.
- Demonstrated experience configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments.
- Hands-on experience with Palo Alto Networks Next-Generation Firewalls or F5 BIG-IP technologies.
- Working knowledge of DoD Zero Trust controls and network security principles.
- Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
- Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
- Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, and change control.
- Ability to troubleshoot network connectivity and security integration issues in complex environments.
- Ability to develop and maintain technical documentation, including network diagrams, IP plans, and configuration records.
- Strong communication, troubleshooting, and teamwork skills.
- At least one IAT Level II requirement, such as Security+ CE.
- Active Secret Clearance.
- U.S. citizenship.
Nice To Haves
- Bachelor's degree in a technical field.
- Cisco Certified Network Professional (CCNP) Enterprise.
- Palo Alto Networks Certified Network Security Engineer (PCNSE).
- F5 BIG-IP administration certification.
- Cisco 300-415 ENSDWI certification.
- Experience supporting Air Force Network (AFNet) or base communications environments.
- Experience with TACLANE devices, SIPRNet, and DISA network connections.
- Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
- Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
- Experience with Python, Ansible, NETCONF, or RESTCONF.
- Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
- Experience with VMware vSphere.
Responsibilities
- Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
- Support service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
- Assist with service chaining, traffic steering, and routing integration across network security services.
- Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls and/or F5 BIG-IP technologies.
- Support network security integrations and Zero Trust controls across enterprise network environments.
- Implement and troubleshoot QoS, DSCP markings, and traffic prioritization.
- Assist with site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
- Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
- Participate in integration lab testing, validation, and performance assessments before production deployment.
- Support SIPRNet connectivity and TACLANE integration requirements.
- Coordinate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues.
- Support security logging, SIEM log forwarding, and configuration documentation.
- Maintain network diagrams, IP plans, as-built documentation, and change records.
- Assist with network automation and configuration tasks using Python, Ansible, or network APIs.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
