Network Zero Trust Engineer

Gormat; United States; Remote; USD 120,000 - 150,000; Full time

Job summary

Gormat seeks a Network Zero Trust Engineer to deploy and maintain secure enterprise networks, focusing on Cisco SD‑WAN, security technologies, and Zero Trust controls. The role involves hands‑on configuration, testing, and integration across DoD networks.

The ideal candidate will have 8+ years in enterprise or DoD environments, hands‑on Cisco SD‑WAN with Palo Alto or F5, and an Active Secret Clearance. This remote position includes travel to support deployments and lab validations.

Qualifications

• 8+ years of experience in enterprise or DoD network engineering.
• At least 2 years of hands-on Cisco SD‑WAN experience with Palo Alto Networks or F5 technologies.
• Experience configuring, deploying, and troubleshooting Cisco Catalyst SD‑WAN environments.
• Working knowledge of DoD Zero Trust controls and network security principles.
• Active Secret Clearance and U.S. citizenship.

Responsibilities

• Configure Cisco Catalyst SD‑WAN environments with devices, templates, and policies.
• Manage service VRFs, BGP, OSPF, OMP, TLOCs, IPsec, and high‑availability.
• Assist with integration of security services and zero trust controls.
• Configure Palo Alto or F5 NGFWs as needed.
• Support QoS, DSCP, and traffic prioritization implementations.
• Coordinate site readiness: IP/VLAN allocations, DNS/NTP, bandwidth.
• Plan changes windows, cutovers, and rollback procedures.
• Participate in lab testing and performance assessments before production.
• Support SIPRNet connectivity and TACLANE integration.
• Document network diagrams, IP plans, and change records.
• Assist with network automation using Python/Ansible.

Skills

Enterprise/DoD network engineering

Cisco SD‑WAN with Palo Alto or F5

Network troubleshooting in complex env

Communication and teamwork

IAT Level II (Security+)

Education

Bachelor's degree in technical field

Tools

Cisco SD‑WAN

Palo Alto NGFW

F5 BIG‑IP

BGP/OSPF/VLANs

Python/Ansible

RESTCONF

Job description

*** This is a remote opportunity that involves travel.

Position Overview

We are seeking a Network Zero Trust Engineer to support the deployment, integration, and maintenance of secure enterprise network infrastructure. This position will focus on hands‑on configuration, testing, troubleshooting, and implementation of Cisco SD‑WAN, network security technologies, and Zero Trust capabilities.

The ideal candidate will have practical experience working with Cisco SD‑WAN and either Palo Alto Networks or F5 technologies in enterprise or DoD network environments.

Key Responsibilities

• Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD‑WAN environments, including device groups, templates, profiles, and policies.
• Support service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high‑availability configurations.
• Assist with service chaining, traffic steering, and routing integration across network security services.
• Configure, manage, and troubleshoot Palo Alto Networks Next‑Generation Firewalls and/or F5 BIG‑IP technologies.
• Support network security integrations and Zero Trust controls across enterprise network environments.
• Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
• Assist with site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
• Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
• Participate in integration lab testing, validation, and performance assessments before production deployment.
• Support SIPRNet connectivity and TACLANE integration requirements.
• Coordinate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues.
• Support security logging, SIEM log forwarding, and configuration documentation.
• Maintain network diagrams, IP plans, as‑built documentation, and change records.
• Assist with network automation and configuration tasks using Python, Ansible, or network APIs.

Required Qualifications

• 8+ years of experience in enterprise or Department of Defense (DoD) network engineering.
• At least 2 years of hands‑on Cisco SD‑WAN experience in combination with Palo Alto Networks or F5 technologies.
• Demonstrated experience configuring, deploying, and troubleshooting Cisco Catalyst SD‑WAN environments.
• Hands‑on experience with at least one of the following:
  • Palo Alto Networks Next‑Generation Firewalls
  • F5 BIG‑IP technologies
• Working knowledge of DoD Zero Trust controls and network security principles.
• Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
• Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q‑in‑Q), and IPsec.
• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800‑53, configuration hardening, and change control.
• Ability to troubleshoot network connectivity and security integration issues in complex environments.
• Ability to develop and maintain technical documentation, including network diagrams, IP plans, and configuration records.
• Strong communication, troubleshooting, and teamwork skills.
• At least one IAT Level II requirements (e.g., Security+ CE).
• Active Secret Clearance
• U.S. citizenship.

Preferred Qualifications

• Bachelor's degree in a technical field.
• Cisco Certified Network Professional (CCNP) Enterprise.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• F5 BIG‑IP administration certification.
• Cisco 300‑415 ENSDWI certification.
• Experience supporting Air Force Network (AFNet) or base communications environments.
• Experience with TACLANE devices, SIPRNet, and DISA network connections.
• Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
• Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
• Experience with Python, Ansible, NETCONF, or RESTCONF.
• Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
• Experience with VMware vSphere.

Technical Environment

Cisco Catalyst SD‑WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG‑IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools.