Network Zero Trust Engineer

Position Overview

We are seeking a Network Zero Trust Engineer to support the deployment, integration, and maintenance of secure enterprise network infrastructure. This position will focus on hands-on configuration, testing, troubleshooting, and implementation of Cisco SD-WAN, network security technologies, and Zero Trust capabilities.

The ideal candidate will have practical experience working with Cisco SD-WAN and either Palo Alto Networks or F5 technologies in enterprise or DoD network environments.

Key Responsibilities

• Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
• Support service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
• Assist with service chaining, traffic steering, and routing integration across network security services.
• Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls and/or F5 BIG-IP technologies.
• Support network security integrations and Zero Trust controls across enterprise network environments.
• Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
• Assist with site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
• Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
• Participate in integration lab testing, validation, and performance assessments before production deployment.
• Support SIPRNet connectivity and TACLANE integration requirements.
• Coordinate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues.
• Support security logging, SIEM log forwarding, and configuration documentation.
• Maintain network diagrams, IP plans, as-built documentation, and change records.
• Assist with network automation and configuration tasks using Python, Ansible, or network APIs.

Required Qualifications

• 8+ years of experience in enterprise or Department of Defense (DoD) network engineering.
• At least 2 years of hands-on Cisco SD-WAN experience in combination with Palo Alto Networks or F5 technologies.
• Demonstrated experience configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments.
• Hands-on experience with at least one of the following:
• Palo Alto Networks Next-Generation Firewalls
• F5 BIG-IP technologies
• Working knowledge of DoD Zero Trust controls and network security principles.
• Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
• Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, and change control.
• Ability to troubleshoot network connectivity and security integration issues in complex environments.
• Ability to develop and maintain technical documentation, including network diagrams, IP plans, and configuration records.
• Strong communication, troubleshooting, and teamwork skills.
• At least one IAT Level II requirements (e.g., Security+ CE).
• Active Secret security clearance at the time of submission, with SIPRNet eligibility.
• U.S. citizenship.

Preferred Qualifications

• Bachelor's degree in a technical field.
• Cisco Certified Network Professional (CCNP) Enterprise.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• F5 BIG-IP administration certification.
• Cisco 300-415 ENSDWI certification.
• Experience supporting Air Force Network (AFNet) or base communications environments.
• Experience with TACLANE devices, SIPRNet, and DISA network connections.
• Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
• Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
• Experience with Python, Ansible, NETCONF, or RESTCONF.
• Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
• Experience with VMware vSphere.

Technical Environment

Cisco Catalyst SD-WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG-IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools.