Senior Network Zero Trust Engineer

Gormat; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Gormat is seeking an experienced Senior Network Zero Trust Engineer to modernize enterprise networks using Cisco SD-WAN, Palo Alto Networks, and F5 technologies. The role emphasizes design, deployment, and troubleshooting of secure network architectures with Zero Trust principles.

The ideal candidate will have DoD/network security experience, an active Secret clearance, and strong documentation and collaboration skills to coordinate across network, cybersecurity, and engineering teams.

Qualifications

• Bachelor's degree in a technical field required.
• Active Secret Clearance required.
• IAT Level II certification required (e.g., Security+ CE).
• 10+ years in enterprise/DoD network and security engineering.
• Experience with Cisco SD-WAN, Palo Alto, and F5 technologies.

Responsibilities

• Design, configure, and maintain Cisco Catalyst SD-WAN environments.
• Troubleshoot BGP, OSPF, VRFs, IPsec, and high-availability configurations.
• Integrate Zero Trust controls and security services across the network.
• Collaborate with cybersecurity, infrastructure, and engineering teams.
• Develop technical documentation, diagrams, and change records.

Skills

IAT Level II certification

Active Secret Clearance

U.S. citizenship

Strong communication

DoD/NIST knowledge

Education

Bachelor's degree in a technical field

Tools

Cisco SD-WAN

Palo Alto Networks

F5 BIG-IP

BGP/OSPF/VRFs

Job description

*** This is a remote opportunity that involves travel.

Position Overview

We are seeking an experienced Senior Network Zero Trust Engineer to support the modernization of enterprise network infrastructure through the implementation of Cisco SD-WAN, next-generation firewalls, application delivery technologies, and Zero Trust security principles.

The ideal candidate will have extensive hands-on experience designing, implementing, integrating, and troubleshooting complex network environments, with strong technical expertise in Cisco SD-WAN, Palo Alto Networks, and F5 technologies.

Key Responsibilities

• Design, configure, implement, and maintain Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies.
• Engineer and troubleshoot service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations.
• Design and implement service chaining, traffic steering, and symmetric routing paths across network security services.
• Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls, including virtual routers, security zones, SSL/TLS decryption, and WildFire.
• Configure, manage, and troubleshoot F5 BIG-IP technologies, including Local Traffic Manager (LTM), Advanced WAF, TLS, pools, and health monitors.
• Integrate network security technologies and Zero Trust controls to support secure enterprise connectivity.
• Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization.
• Conduct site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements.
• Support implementation planning, scheduled change windows, cutovers, and rollback procedures.
• Participate in integration lab testing, validation, and performance assessments before production deployment.
• Support SIPRNet connectivity and TACLANE integration requirements.
• Coordinate with network, cybersecurity, infrastructure, and engineering teams to resolve integration issues.
• Implement security logging and SIEM log forwarding, and maintain configuration evidence.
• Develop and maintain network diagrams, IP plans, as-built documentation, and change records.
• Support automation initiatives using Python, Ansible, and network APIs.
• Provide technical guidance and mentorship to network engineering team members.

Required Qualifications

• 10+ years of experience in enterprise or Department of Defense (DoD) network and network security engineering.
• At least 4 years of hands-on production experience with Cisco SD-WAN, Palo Alto Networks, and F5 technologies.
• Demonstrated experience designing, deploying, configuring, and troubleshooting Cisco Catalyst SD-WAN environments.
• Hands-on experience with both Palo Alto Networks Next-Generation Firewalls and F5 BIG-IP technologies.
• Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking.
• Strong understanding of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec.
• Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, change control, and network boundary approval processes.
• Experience designing and integrating Zero Trust network architectures in large-scale environments.
• Ability to develop and maintain technical documentation, including network diagrams, IP plans, and as-built configurations.
• Strong communication, troubleshooting, and cross-functional collaboration skills.
• Bachelor's degree in a technical field or equivalent experience.
• At least one IAT Level II certification (e.g., Security+ CE).
• Active Secret Clearance.
• U.S. citizenship.

Preferred Qualifications

• IAT Level III certification (e.g., CISSP).
• Cisco Certified Network Professional (CCNP) Enterprise.
• Palo Alto Networks Certified Network Security Engineer (PCNSE).
• F5 BIG-IP administration certification.
• Cisco 300-415 ENSDWI certification.
• Experience supporting Air Force Network (AFNet) or base communications environments.
• Experience with TACLANE devices, SIPRNet, and DISA network connections.
• Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center.
• Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy.
• Experience with Python, Ansible, NETCONF, or RESTCONF.
• Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl.
• Experience with VMware vSphere.

Technical Environment

Cisco Catalyst SD-WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG-IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools.