Lead Engineer I – F5 Technical SME

KPMG LLP; Montvale (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

KPMG LLP is seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization in Montvale, NJ. The role focuses on enterprise F5 ADC architectures, global load balancing, security solutions, and automation using modern IaC tools.

Lead and mentor cross-functional teams, drive strategic modernization, and ensure high availability across multi-datacenter environments. Candidates should have extensive F5 experience and relevant certifications, with work authorization in

Qualifications

• Background in enterprise network engineering.
• F5 ecosystem mastery including BIG-IP components.
• Authorized to work in the United States without sponsorship.

Responsibilities

• Serve as SME and lead architect for F5 ADC platforms, defining roadmaps and DR architectures.
• Design and implement global/local load balancing, traffic steering, and iRules-based policies.
• Architect, deploy, and manage F5 security solutions including AWAF/ASM, AFM, APM, Bot Defense, and DDoS protection.
• Drive DevOps integration with automation frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs.
• Establish operational standards, lifecycle management, and root-cause analyses for enterprise incidents.
• Provide senior engineering leadership and mentor cross-functional teams; escalate platform events as needed.

Skills

F5 engineering

Network architecture

Python automation

Cross-functional leadership

Education

Bachelor's degree

Tools

Python

Ansible

Terraform

PowerShell

REST APIs

Kubernetes

Git

Job description

KPMG is currently seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization.

Responsibilities:

• Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
• Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
• Architect, deploy, and manage comprehensive F5 security solutions—including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection—partnering with cybersecurity teams to enforce Zero Trust and robust application defense
• Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs and Infrastructure-as-Code (IaC)
• Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
• Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events.
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum five years of recent in enterprise network engineering, with minimum three years of dedicated F5 engineering and architecture in large-scale, high-availability environments; experience in highly regulated sectors like financial services or healthcare preferred
• Bachelor’s degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
• Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM/AWAF, AFM), BIG-IQ, next-gen hardware architectures (VELOS, rSeries, iSeries, VIPRION), and F5OS
• Comprehensive expertise in core networking protocols and enterprise security architectures, including BGP, TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, routing and switching, as well as implementing Zero Trust frameworks and enterprise WAF/DDoS mitigation
• Demonstrated hands-on proficiency in network automation and modern provisioning workflows using Python, Ansible, Terraform, Git, REST APIs, and Infrastructure-as-Code (IaC) practices, with familiarity in Kubernetes ingress/service mesh or multi-cloud networking
• Proven track record in strategic technology planning, high-stakes problem resolution, architecture documentation, risk mitigation, and executive-level cross-functional communication to lead major migrations and mentor engineering teams
• Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)