> Markdown version of [/jobs/ext/137141-network-operations-lead-zero-trust](https://www.wearedevelopers.com/jobs/ext/137141-network-operations-lead-zero-trust). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Operations Lead - Zero Trust - **Company:** Northramp LLC - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, Private Networks, IEEE 802.1X, Amazon Web Services, Microsoft Azure, Border Gateway Protocol, Cloud Computing, Cyber Security, Information Systems, Computer Networks, System Configuration, Enhanced Interior Gateway Routing Protocol, Networking Hardware, Internet Protocol Security (IP SEC), IPv4, IPv6, Virtual Private Networks (VPN), Internet Service Provider, Python (Programming Language), Network Security, Microsoft Visio, Network Architecture, Network Diagrams, Routing, Network Segmentation, Packet Analyzer, Open Shortest Path First (OSPF), Paessler Router Traffic Grapher, Lucidchart, Ansible, Zero Trust Network Access, Security Information and Event Management, Systems Integration, Wireshark, Virtual Local Area Networks, Software Vulnerability Management, Wide Area Networks, Wireless Networks, VLAN Trunking Protocol (VTP), Transport Layer Security, Network Access Control, Computer Network Operations, HybridCloud, Firewalls (Computer Science), Juniper, SC Clearance, Information Technology, SolarWinds (Software), Palo Alto Networks, Performance Monitor, Routing & Switching, Terraform, Open Network Automation Platform, Network Server, Cisco - **Published:** May 23, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e2bb0e8b94b1d38b ## About the Role Do you have experience in Zero trust architecture design?, Do you have a Bachelor's degree?, You have led network operations in a federal environment under real security pressure - and you understand Zero Trust. You can run a network incident bridge, design segmentation and identity-based access policies, and lead a team of engineers through the operational maturity needed to actually implement Zero Trust. You operate with low ego, high accountability., * 7-10 years of progressive, hands-on experience in enterprise network operations leadership, with hands-on experience implementing or operating in a Zero Trust architecture. * Bachelor's degree in Computer Science, Network Engineering, Information Systems, or a related technical field. Equivalent professional experience considered. * Demonstrated experience leading network operations in a federal or comparable regulated environment. * Hands-on expertise designing, implementing, or operating Zero Trust architectures - including identity-based access, micro-segmentation, and continuous-verification controls. * Strong working knowledge of enterprise network infrastructure - routing, switching, firewalls, VPN, SD-WAN, wireless, and IPv4/IPv6 networking. * Hands-on experience with Cisco, Palo Alto, Juniper, or equivalent enterprise infrastructure. * Strong understanding of network security - segmentation, NAC (802.1X, RADIUS), WAF, SIEM integration, and STIG compliance. * Proven leadership; track record of leading technical teams through operational incidents and strategic transitions. * Excellent written and verbal communication; ability to brief senior federal stakeholders. * U.S. Citizenship and the ability to obtain and maintain a Secret clearance., * Professional-level networking certification - Cisco CCNP/CCIE or Palo Alto Networks Certified Network Security Engineer (PCNSE). CCNA may be considered with substantial hands-on experience. * CISSP, CISM, or comparable security leadership certification. * Cloud networking certification - AWS Advanced Networking, Azure Network Engineer Associate, or equivalent. * Prior federal civilian or defense network operations experience. * Familiarity with NIST 800-207 (Zero Trust Architecture) and the CISA Zero Trust Maturity Model. * Hands-on experience with Aruba Central, Aruba Wireless infrastructure, and Aruba ClearPass Policy Manager in large enterprise or government networks. * Practical experience deploying, configuring, and troubleshooting Palo Alto Networks firewalls, including Panorama management. * Experience integrating Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) for secure remote connectivity and Zero Trust enforcement. * Extensive experience in enterprise network architecture and topology design - LAN/WAN, wireless, SD-WAN, and hybrid cloud integrations - including: IPv4 and IPv6 configuration, migration, and troubleshooting. Routing protocols (BGP, OSPF, EIGRP) and switching technologies (VLANs, STP, VTP). Network security technologies (VPNs, ACLs, IPsec, SSL/TLS, NGFW). Cloud networking in AWS, Azure, or GCP. Network automation tools (Python, Ansible, Terraform). * Proven ability to activate, back up, deactivate, and restart network resources and services with minimal downtime. * Strong background diagnosing complex LAN/MAN/WAN issues using packet analysis and performance monitoring tools (Wireshark, SolarWinds, PRTG). * Excellent documentation skills, including network diagrams in Visio or Lucidchart. Physical Requirements This role requires the ability to lift and carry up to 50 pounds, with or without reasonable accommodation, when handling IT equipment such as servers, network hardware, and end-user devices. Reasonable accommodations will be considered for qualified individuals with disabilities in accordance with the Americans with Disabilities Act. Clearance An active or current-eligible Secret clearance is required for this role. Selected applicants will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. Failure to maintain clearance eligibility may result in removal from the role. ## Description * Lead the Network Operations workstream across DFC, owning the reliability, performance, and security posture of DFC's enterprise network. * Drive operational execution of DFC's Zero Trust strategy - identity-based access, micro-segmentation, continuous verification, and least-privilege enforcement across network and application traffic. * Own incident response for network and connectivity issues across DFC HQ (Washington, DC) and DFC NYC (100 Pearl St); maintain availability SLAs. * Lead and mentor the network engineering and operations team; set clear technical direction and develop talent on engagement. * Maintain and continuously improve network architecture documentation, runbooks, and operational procedures. * Operate and evolve DFC's perimeter and internal network controls - next-generation firewalls (Palo Alto, Cisco, or equivalent), WAF, network access control (802.1X, NAC), and SD-WAN where applicable. * Coordinate with the security operations team on threat detection, SIEM integration, vulnerability management, and incident response. * Support DFC's CIO and security leadership with executive briefings, capacity planning, and technology investment decisions. * Lead vendor coordination with DFC's ISPs, carrier partners, and security tool vendors. * Define network operations metrics and produce regular reporting for DFC government leadership. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [IP Authentication: A Tale of Performance Pitfalls and Challenges in Prod](https://www.wearedevelopers.com/videos/1413-ip-authentication-a-tale-of-performance-pitfalls-and-challenges-in-prod) - [IoT: The road to sustainability](https://www.wearedevelopers.com/videos/557-iot-the-road-to-sustainability) - [Your Infrastructure Is Not a Playground: AI Agents for Infra Done Right](https://www.wearedevelopers.com/videos/2084-your-infrastructure-is-not-a-playground-ai-agents-for-infra-done-right) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Tips on mastering remote job interviews](https://www.wearedevelopers.com/magazine/23-tips-on-mastering-remote-job-interviews)