Senior Network Zero Trust Engineer

Position Overview

We are seeking an experienced Senior Network Zero Trust Engineer to support the modernization of enterprise network infrastructure through the implementation of Cisco SD-WAN, next-generation firewalls, application delivery technologies, and Zero Trust security principles.

The ideal candidate will have extensive hands-on experience designing, implementing, integrating, and troubleshooting complex network environments, with strong technical expertise in Cisco SD-WAN, Palo Alto Networks, and F5 technologies.

Key Responsibilities

• Design, configure, implement, and maintain Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
• Engineer and troubleshoot service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
• Design and implement service chaining, traffic steering, and symmetric routing paths across network security services.
• Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls, including virtual routers, security zones, SSL/TLS decryption, and WildFire.
• Configure, manage, and troubleshoot F5 BIG-IP technologies, including Local Traffic Manager (LTM), Advanced WAF, TLS, pools, and health monitors.
• Integrate network security technologies and Zero Trust controls to support secure enterprise connectivity.
• Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
• Conduct site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
• Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
• Participate in integration lab testing, validation, and performance assessments before production deployment.
• Support SIPRNet connectivity and TACLANE integration requirements.
• Coordinate with network, cybersecurity, infrastructure, and engineering teams to resolve integration issues.
• Implement security logging and SIEM log forwarding, and maintain configuration evidence.
• Develop and maintain network diagrams, IP plans, as-built documentation, and change records.
• Support automation initiatives using Python, Ansible, and network APIs.
• Provide technical guidance and mentorship to network engineering team members.

Required Qualifications

• 10+ years of experience in enterprise or Department of Defense (DoD) network and network security engineering.
• At least 4 years of hands-on production experience with Cisco SD-WAN, Palo Alto Networks, and F5 technologies.
• Demonstrated experience designing, deploying, configuring, and troubleshooting Cisco Catalyst SD-WAN environments.
• Hands-on experience with both Palo Alto Networks Next-Generation Firewalls and F5 BIG-IP technologies.
• Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
• Strong understanding of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, change control, and network boundary approval processes.
• Experience designing and integrating Zero Trust network architectures in large-scale environments.
• Ability to develop and maintain technical documentation, including network diagrams, IP plans, and as-built configurations.
• Strong communication, troubleshooting, and cross-functional collaboration skills.
• Bachelor's degree in a technical field or equivalent experience.
• At least one IAT Level II certification (e.g., Security+ CE).
• Active Secret Clearance.
• U.S. citizenship.

Preferred Qualifications

• IAT Level III certification (e.g., CISSP).
• Cisco Certified Network Professional (CCNP) Enterprise.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• F5 BIG-IP administration certification.
• Cisco 300-415 ENSDWI certification.
• Experience supporting Air Force Network (AFNet) or base communications environments.
• Experience with TACLANE devices, SIPRNet, and DISA network connections.
• Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
• Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
• Experience with Python, Ansible, NETCONF, or RESTCONF.
• Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
• Experience with VMware vSphere.

Technical Environment

Cisco Catalyst SD-WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG-IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools.