Network Zero Trust Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.

• Provide support for service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.

• Assist with service chaining, traffic steering, and integration of routing across network security services.

• Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls and/or F5 BIG-IP technologies.

• Support network security integrations and implement Zero Trust controls within enterprise network environments.

• Implement and resolve issues related to QoS, DSCP markings, and traffic prioritization.

• Assist in conducting site readiness assessments, which include IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.

• Support implementation planning, scheduled change windows, cutovers, and rollback procedures.

• Participate in integration lab testing, validation, and performance assessments prior to production deployment.

• Support SIPRNet connectivity and TACLANE integration requirements.

• Collaborate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues.

• Support security logging, SIEM log forwarding, and maintain configuration documentation.

• Keep network diagrams, IP plans, as-built documentation, and change records up to date.

• Assist with network automation and configuration tasks utilizing Python, Ansible, or network APIs.

⛳️ Requirements

• Over 8 years of experience in enterprise or Department of Defense (DoD) network engineering.

• At least 2 years of practical experience with Cisco SD-WAN, along with expertise in Palo Alto Networks or F5 technologies.

• Proven experience in configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments.

• Hands-on experience with Palo Alto Networks Next-Generation Firewalls or F5 BIG-IP technologies.

• Familiarity with DoD Zero Trust controls and network security principles.

• Experience with network security integrations, including PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.

• Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.

• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, and change control.

• Capability to troubleshoot network connectivity and security integration issues in complex environments.

• Ability to create and maintain technical documentation, including network diagrams, IP plans, and configuration records.

• At least one IAT Level II certification (e.g., Security+ CE).

• Active Secret clearance at the time of submission, with SIPRNet eligibility.

• Must be a U.S. citizen.

🏝️ Benefits

• Competitive salary and compensation package.

• Comprehensive health and wellness benefits.

• Opportunities for professional development and growth.

• Flexible work arrangements.