[Hiring] Senior Network Zero Trust Engineer @Gormat

Role Description

This is a remote opportunity that involves travel. We are seeking an experienced Senior Network Zero Trust Engineer to support the modernization of enterprise network infrastructure through the implementation of Cisco SD-WAN, next-generation firewalls, application delivery technologies, and Zero Trust security principles. The ideal candidate will have extensive hands-on experience designing, implementing, integrating, and troubleshooting complex network environments, with strong technical expertise in Cisco SD-WAN, Palo Alto Networks, and F5 technologies.

Key Responsibilities

• Design, configure, implement, and maintain Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
• Engineer and troubleshoot service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
• Design and implement service chaining, traffic steering, and symmetric routing paths across network security services.
• Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls, including virtual routers, security zones, SSL/TLS decryption, and WildFire.
• Configure, manage, and troubleshoot F5 BIG-IP technologies, including Local Traffic Manager (LTM), Advanced WAF, TLS, pools, and health monitors.
• Integrate network security technologies and Zero Trust controls to support secure enterprise connectivity.
• Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
• Conduct site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
• Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
• Participate in integration lab testing, validation, and performance assessments before production deployment.
• Support SIPRNet connectivity and TACLANE integration requirements.
• Coordinate with network, cybersecurity, infrastructure, and engineering teams to resolve integration issues.
• Implement security logging and SIEM log forwarding, and maintain configuration evidence.
• Develop and maintain network diagrams, IP plans, as-built documentation, and change records.
• Support automation initiatives using Python, Ansible, and network APIs.
• Provide technical guidance and mentorship to network engineering team members.

Qualifications

• 10+ years of experience in enterprise or Department of Defense (DoD) network and network security engineering.
• At least 4 years of hands-on production experience with Cisco SD-WAN, Palo Alto Networks, and F5 technologies.
• Demonstrated experience designing, deploying, configuring, and troubleshooting Cisco Catalyst SD-WAN environments.
• Hands-on experience with both Palo Alto Networks Next-Generation Firewalls and F5 BIG-IP technologies.
• Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
• Strong understanding of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, change control, and network boundary approval processes.
• Experience designing and integrating Zero Trust network architectures in large-scale environments.
• Ability to develop and maintain technical documentation, including network diagrams, IP plans, and as-built configurations.
• Strong communication, troubleshooting, and cross-functional collaboration skills.
• Bachelor's degree in a technical field or equivalent experience.
• At least one IAT Level II certification (e.g., Security+ CE).
• Active Secret Clearance.
• U.S. citizenship.

Preferred Qualifications

• IAT Level III certification (e.g., CISSP).
• Cisco Certified Network Professional (CCNP) Enterprise.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• F5 BIG-IP administration certification.
• Cisco 300-415 ENSDWI certification.
• Experience supporting Air Force Network (AFNet) or base communications environments.
• Experience with TACLANE devices, SIPRNet, and DISA network connections.
• Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
• Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
• Experience with Python, Ansible, NETCONF, or RESTCONF.
• Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
• Experience with VMware vSphere.

Technical Environment

• Cisco Catalyst SD-WAN
• Cisco routing and switching
• Palo Alto Networks NGFW
• F5 BIG-IP
• BGP
• OSPF
• OMP
• VRFs
• MPLS
• VLANs
• IPsec
• PKI
• SIEM
• MFA
• SIPRNet
• TACLANE
• Zero Trust Architecture
• Public cloud networking
• Python
• Ansible
• Network automation tools