Senior Zero Trust Network Architect

VAE, Inc.

Virginia

On-site

USD 150,000 - 200,000

Full time

3 days ago

Be an early applicant

A complete application in a minute

Tailored resume and cover letter, ready to send.

Get past ATS filters

Job summary

VAE, Inc. is seeking a Senior Network Zero Trust Engineer to lead the Next Generation Gateway program. You will own design questions, align the network with Zero Trust controls and solve routing, firewall and inspection challenges, while mentoring junior engineers.

The role requires hands-on experience with Cisco SD-WAN, Palo Alto firewalls, F5 BIG-IP and AppGate ZTNA. You will work under DoD security frameworks and DISA/NIST guidelines in a dynamic environment.

Qualifications

10+ years of enterprise or DoD network and network security engineering.
4+ years with Cisco SD-WAN, Palo Alto and F5 in production.
Bachelor's degree in a technical field, or equivalent experience.
IAT Level II minimum; IAT Level III preferred.
Active Secret clearance eligible for SIPRNet accounts.

Responsibilities

Lead large-scale Zero Trust network design and integration, including segmentation and network access control, against the DoD Zero Trust controls.
Design and govern the Cisco Catalyst SD-WAN fabric, including VRF segmentation and centralized policy.
Architect routing across the fabric with BGP/OSPF peering and VRF route leaking.
Design service chaining through Palo Alto next-generation firewalls, AppGate ZTNA gateways and F5 BIG-IP.
Resolve complex firewall, TLS decryption and inspection issues across Palo Alto and F5 platforms.
Ensure designs meet DISA STIG and NIST SP 800-53 hardening, change control and boundary approval requirements.
Produce and review logical and physical diagrams, IP plans and as-built records.
Mentor engineers and collaborate with Government network operators and partners.