Position Overview
We are seeking a Network Zero Trust Engineer to support the deployment, integration, and maintenance of secure enterprise network infrastructure. This position will focus on hands-on configuration, testing, troubleshooting, and implementation of Cisco SD-WAN, network security technologies, and Zero Trust capabilities.
The ideal candidate will have practical experience working with Cisco SD-WAN and either Palo Alto Networks or F5 technologies in enterprise or DoD network environments.
Key Responsibilities
- Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
- Support service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
- Assist with service chaining, traffic steering, and routing integration across network security services.
- Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls and/or F5 BIG-IP technologies.
- Support network security integrations and Zero Trust controls across enterprise network environments.
- Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
- Assist with site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
- Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
- Participate in integration lab testing, validation, and performance assessments before production deployment.
- Support SIPRNet connectivity and TACLANE integration requirements.
- Coordinate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues.
- Support security logging, SIEM log forwarding, and configuration documentation.
- Maintain network diagrams, IP plans, as-built documentation, and change records.
- Assist with network automation and configuration tasks using Python, Ansible, or network APIs.
Required Qualifications
- 8+ years of experience in enterprise or Department of Defense (DoD) network engineering.
- At least 2 years of hands-on Cisco SD-WAN experience in combination with Palo Alto Networks or F5 technologies.
- Demonstrated experience configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments.
- Hands-on experience with at least one of the following:
- Palo Alto Networks Next-Generation Firewalls
- F5 BIG-IP technologies
- Working knowledge of DoD Zero Trust controls and network security principles.
- Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
- Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
- Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, and change control.
- Ability to troubleshoot network connectivity and security integration issues in complex environments.
- Ability to develop and maintain technical documentation, including network diagrams, IP plans, and configuration records.
- Strong communication, troubleshooting, and teamwork skills.
- At least one IAT Level II requirements (e.g., Security+ CE).
- Active Secret security clearance at the time of submission, with SIPRNet eligibility.
- U.S. citizenship.
Preferred Qualifications
- Bachelor's degree in a technical field.
- Cisco Certified Network Professional (CCNP) Enterprise.
- Palo Alto Networks Certified Network Security Engineer (PCNSE).
- F5 BIG-IP administration certification.
- Cisco 300-415 ENSDWI certification.
- Experience supporting Air Force Network (AFNet) or base communications environments.
- Experience with TACLANE devices, SIPRNet, and DISA network connections.
- Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
- Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
- Experience with Python, Ansible, NETCONF, or RESTCONF.
- Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
- Experience with VMware vSphere.
Technical Environment
Cisco Catalyst SD-WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG-IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools.
