Senior Deployment Engineer, AppGate ZTNA

This is a fully remote position, open to applicants in District of Columbia, +1 more state.

📋 Description

• Oversee comprehensive AppGate ZTNA implementations: install and configure controllers, gateways, and clients in on-premises, cloud, and offline environments.

• Integrate AppGate with customer identity providers and sources of trust and risk telemetry, including SAML, OIDC, RADIUS, LDAP(s), Active Directory, NGFWs, entitlement automation systems, SIEM/SOAR, and ITSM.

• Architect deployment solutions that align with customer needs for availability, scalability, and the enforcement of least privilege access.

• Troubleshoot issues by utilizing logs, shell access, packet captures, and code examination down to the protocol, OS, and application layer.

• Develop and maintain scripts and automation (Bash, PowerShell, JavaScript, REST APIs) to facilitate deployment and ongoing support.

• Strengthen deployments to adhere to STIG, SCAP, and relevant Federal compliance standards.

• Act as the point of escalation for intricate deployment and support challenges.

• Manage and uphold deployed environments: including patching, upgrades, health monitoring, and incident response.

• Generate comprehensive as-built documentation, runbooks, and operational transition materials.

• Provide mentorship to Associate and mid-level Delivery Engineers and evaluate their work.

⛳️ Requirements

• 8 to 12 years of experience in networking, security, systems, platform, or automation engineering roles, with practical delivery experience.

• Proven expertise in Linux systems administration.

• Proficient in scripting and automation with Bash, PowerShell, and JavaScript.

• Familiarity with REST APIs for integration and automation tasks.

• Extensive experience with identity systems: Active Directory, DNS, PKI, SAML, OIDC, RADIUS, and LDAP.

• Experience in deploying to public cloud platforms (AWS, Azure, GCP) and virtualization technologies (VMware vSphere, Microsoft Hyper-V).

• Understanding of networking, transport, and cryptographic protocols such as TLS, IPsec, AES, PKI, and RSA.

• Background in supporting Federal or other high-assurance environments.

• Awareness of STIG and SCAP hardening; familiarity with process frameworks like ITIL or ITSM is advantageous.

• Exceptional written and verbal communication skills for documentation and customer transitions.

• A bachelor's degree in engineering, information technology, or a related field, or equivalent relevant experience.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with employer matching.

• Flexible working hours and remote work options.

• Opportunities for professional development and continued education.