Senior Network Zero Trust Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Design, configure, implement, and sustain Cisco Catalyst SD-WAN environments, encompassing device groups, templates, profiles, and policies.

• Engineer and resolve issues related to service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability setups.

• Create and execute service chaining, traffic steering, and symmetric routing paths across network security services.

• Set up, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls, which includes virtual routers, security zones, SSL/TLS decryption, and WildFire.

• Configure, manage, and troubleshoot F5 BIG-IP technologies, such as Local Traffic Manager (LTM), Advanced WAF, TLS, pools, and health monitors.

• Integrate network security technologies and Zero Trust controls to enable secure enterprise connectivity.

• Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.

• Perform site readiness assessments, covering IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.

• Assist with implementation planning, scheduled change windows, cutovers, and rollback procedures.

• Engage in integration lab testing, validation, and performance evaluations prior to production deployment.

• Support SIPRNet connectivity and TACLANE integration requirements.

• Collaborate with network, cybersecurity, infrastructure, and engineering teams to address integration challenges.

• Implement security logging and SIEM log forwarding, while maintaining configuration evidence.

• Develop and sustain network diagrams, IP plans, as-built documentation, and change records.

• Support automation efforts utilizing Python, Ansible, and network APIs.

• Offer technical guidance and mentorship to network engineering team members.

⛳️ Requirements

• 10+ years of experience in enterprise or Department of Defense (DoD) network and network security engineering.

• Minimum of 4 years of hands-on production experience with Cisco SD-WAN, Palo Alto Networks, and F5 technologies.

• Proven experience in designing, deploying, configuring, and troubleshooting Cisco Catalyst SD-WAN environments.

• Practical experience with both Palo Alto Networks Next-Generation Firewalls and F5 BIG-IP technologies.

• Familiarity with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.

• Strong comprehension of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.

• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, change control, and network boundary approval processes.

• Experience in designing and integrating Zero Trust network architectures in large-scale environments.

• Capable of developing and maintaining technical documentation, including network diagrams, IP plans, and as-built configurations.

• Excellent communication, troubleshooting, and cross-functional collaboration skills.

• Bachelor’s degree in a technical field or equivalent experience.

• At least one IAT Level II certification (e.g., Security+ CE).

• Active Secret Clearance.

• U.S. citizenship.

🏝️ Benefits

• Competitive salary with performance-based incentives.

• Comprehensive health, dental, and vision insurance.

• Retirement savings plan with employer matching contributions.

• Opportunities for professional development and continuing education.

• Flexible work arrangements and a supportive work environment.