Senior Network Zero Trust Engineer
Gormat•,
•Remote
About The Position
We are seeking an experienced Senior Network Zero Trust Engineer to support modernization of enterprise network infrastructure through Cisco SD-WAN, next-generation firewalls, application delivery technologies, and Zero Trust security principles. The role involves designing, implementing, integrating, and troubleshooting complex network environments, with hands-on work across Cisco SD-WAN, Palo Alto Networks, and F5 technologies. This is a remote opportunity that involves travel.
Requirements
- 10 or more years of experience in enterprise or Department of Defense (DoD) network and network security engineering.
- At least 4 years of hands-on production experience with Cisco SD-WAN, Palo Alto Networks, and F5 technologies.
- Demonstrated experience designing, deploying, configuring, and troubleshooting Cisco Catalyst SD-WAN environments.
- Hands-on experience with both Palo Alto Networks Next-Generation Firewalls and F5 BIG-IP technologies.
- Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
- Strong understanding of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
- Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, change control, and network boundary approval processes.
- Experience designing and integrating Zero Trust network architectures in large-scale environments.
- Ability to develop and maintain technical documentation, including network diagrams, IP plans, and as-built configurations.
- Strong communication, troubleshooting, and cross-functional collaboration skills.
- Bachelor's degree in a technical field or equivalent experience.
- At least one IAT Level II certification, such as Security+ CE.
- Active Secret Clearance.
- U.S. citizenship.
Nice To Haves
- IAT Level III certification, such as CISSP.
- Cisco Certified Network Professional (CCNP) Enterprise.
- Palo Alto Networks Certified Network Security Engineer (PCNSE).
- F5 BIG-IP administration certification.
- Cisco 300-415 ENSDWI certification.
- Experience supporting Air Force Network (AFNet) or base communications environments.
- Experience with TACLANE devices, SIPRNet, and DISA network connections.
- Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
- Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
- Experience with Python, Ansible, NETCONF, or RESTCONF.
- Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
- Experience with VMware vSphere.
Responsibilities
- Design, configure, implement, and maintain Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
- Engineer and troubleshoot service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
- Design and implement service chaining, traffic steering, and symmetric routing paths across network security services.
- Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls, including virtual routers, security zones, SSL/TLS decryption, and WildFire.
- Configure, manage, and troubleshoot F5 BIG-IP technologies, including LTM, Advanced WAF, TLS, pools, and health monitors.
- Integrate network security technologies and Zero Trust controls to support secure enterprise connectivity.
- Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
- Conduct site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
- Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
- Participate in integration lab testing, validation, and performance assessments before production deployment.
- Support SIPRNet connectivity and TACLANE integration requirements.
- Coordinate with network, cybersecurity, infrastructure, and engineering teams to resolve integration issues.
- Implement security logging and SIEM log forwarding, and maintain configuration evidence.
- Develop and maintain network diagrams, IP plans, as-built documentation, and change records.
- Support automation initiatives using Python, Ansible, and network APIs.
- Provide technical guidance and mentorship to network engineering team members.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
