Lead Engineer II - F5 Technical Lead/SME

KPMG LLP; Montvale (NJ); On-site; USD 180,000 - 240,000; Full time

Job summary

KPMG LLP seeks an Associate Director, Network Engineer – F5 Technical Lead to join our Digital Nexus organization. You will lead architecture and modernization of enterprise F5 ADC platforms across multi-datacenter environments, defining roadmaps and DR strategies.

The role requires extensive F5 engineering experience, strong scripting and automation skills, and a proven track record in high-availability networks. This is a senior leadership position in a regulated industry.

Qualifications

• Minimum eight years of enterprise network engineering experience with six years in F5 engineering and architecture.
• Bachelor’s degree preferred; advanced technical certifications are strongly preferred.
• Expert-level mastery of F5 BIG‑IP ecosystem and related platforms.

Responsibilities

• Serve as SME and lead architect for F5 ADC platforms across datacenters.
• Design and implement global and local load balancing, traffic steering, and iRules.
• Architect and manage AWAF/ASM, AFM, APM, Bot Defense, and DDoS protections.
• Drive DevOps by automating provisioning and configuration with Python, Ansible, Terraform.
• Lead incident resolution with deep root cause analysis across TCP/IP, DNS, SSL/TLS.
• Provide senior engineering leadership and mentor cross-functional teams.

Skills

F5 BIG-IP expertise

Enterprise networking

Zero Trust architecture

Network automation

Scripting (Python)

Education

Bachelor’s degree

F5-CSE

CCNP Enterprise

CISSP

CCIE Enterprise Infrastructure

Tools

Python

Ansible

Terraform

PowerShell

REST APIs

Kubernetes

Job description

KPMG is currently seeking an Associate Director, Network Engineer – F5 Technical Lead to join our Digital Nexus organization.

Responsibilities:

• Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
• Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
• Architect, deploy, and manage comprehensive F5 security solutions including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection partnering with cybersecurity teams to enforce Zero Trust and robust application defense
• Drive DevOps integration by developing automated provisioning, configuration management, and self‑service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST AP
• Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
• Provide senior engineering leadership, mentor cross‑functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission‑critical platform events
• Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment

Qualifications:

• Minimum eight years of recent experience in enterprise network engineering, with a minimum six years of dedicated F5 engineering and architecture in large‑scale, high‑availability environments (experience in highly regulated sectors like financial services or healthcare preferred)
• Bachelor’s degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required; advanced technical certifications are strongly preferred, such as F5‑CSE, F5‑CTP, F5‑CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
• Expert‑level mastery across the F5 ecosystem, including BIG‑IP (LTM, DNS/GTM, APM, ASM/AWAF, AFM), BIG‑IQ, next‑gen hardware architectures (VELOS, rSeries, iSeries, VIPRION), and F5OS
• Comprehensive expertise in core networking protocols and enterprise security architectures, including BGP, TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, routing & switching, as well as implementing Zero Trust frameworks and enterprise WAF/DDoS mitigation
• Demonstrated hands‑on proficiency in network automation and modern provisioning workflows using Python, Ansible, Terraform, Git, REST APIs, and Infrastructure‑as‑Code (IaC) practices, with familiarity in Kubernetes ingress/service mesh or multi‑cloud networking
• Proven track record in strategic technology planning, high‑stakes problem resolution, architecture documentation, risk mitigation, and executive‑level cross‑functional communication to lead major migrations and mentor engineering teams
• Applicants must be authorized to work in the U.S. without the need for employment‑based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment‑based visa)