> Markdown version of [/jobs/ext/1429159-senior-deployment-engineer-appgate-ztna-federal](https://www.wearedevelopers.com/jobs/ext/1429159-senior-deployment-engineer-appgate-ztna-federal). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Deployment Engineer, AppGate ZTNA (Federal) - **Company:** Gormat, LLC - **Location:** Washington, DC, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Access, JavaScript (Programming Language), Active Directory, Amazon Web Services, Microsoft Azure, Bash Shell, Software Debugging, Domain Name System (DNS), Cryptographic Protocols, Hyper-V, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Lightweight Directory Access Protocols (LDAP), Linux System Administration, Packet Analyzer, OpenID, Public Key Infrastructure, Windows PowerShell, Ansible, Zero Trust Network Access, RSA (Cryptosystem), Security Assertion Markup Language (SAML), Security Content Automation Protocol, Security Information and Event Management, Virtualization Technology, VMware VSphere, Google Cloud, Information Technology, Code Inspection, Restful APIs, Terraform - **Published:** July 24, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9052663/senior-deployment-engineer-appgate-ztna-federal ## About the Role * 8 to 12 years in networking, security, systems, platform, or automation engineering roles, with hands-on delivery experience. * Demonstrated mastery of Linux systems administration. * Hands-on scripting and automation with Bash, PowerShell, and JavaScript. * Working knowledge of REST APIs for integration and automation. * Strong experience with identity systems: Active Directory, DNS, PKI, SAML, OIDC, RADIUS, and LDAP. * Experience deploying to public cloud (AWS, Azure, GCP) and virtualization platforms (VMware vSphere, Microsoft Hyper-V).. * Familiarity with networking, transport, and cryptographic protocols such as TLS, IPsec, AES, PKI, and RSA. * Experience supporting Federal or other high-assurance environments. * Familiarity with STIG and SCAP hardening; process frameworks such as ITIL or ITSM a plus. * Excellent written and verbal communication for documentation and customer handoff. * Bachelor's degree in engineering, information technology, or a related discipline, or equivalent related experience., * CCNP, CCIE, RHCE, CISSP, CCNA, Security +, MCSE or equivalent certifications. * Prior experience deploying ZTNA, software-defined perimeter (SDP), or VPN-replacement technologies. * Experience with infrastructure as code and configuration as code (Terraform, Ansible). Clearance * Active U.S. security clearance, or the ability to obtain and maintain one. Top Secret a plus., * Willingness to travel to customer sites as project and customer needs require. Travel can exceed 50% depending on the deployment. ## Description * Lead end-to-end AppGate ZTNA deployments: install and configure controllers, gateways, and clients across on-premises, cloud, and disconnected environments. * Integrate AppGate with customer identity providers and sources of trust and risk telemetry, including SAML, OIDC, RADIUS, LDAP(s), Active Directory, NGFWs, entitlement automation systems, SIEM/SOAR, and ITSM. * Design deployment architectures that meet customer requirements for availability, scale, and least privilege access enforcement. * Debug failures using logs, shell access, packet captures, and code inspection down to the protocol, OS, and application level. * Write and maintain scripts and automation (Bash, PowerShell, JavaScript, REST APIs) to support deployment and sustainment. * Harden deployments to STIG, SCAP, and applicable Federal compliance baselines. * Serve as the escalation point for complex deployment and sustainment issues. * Sustain and maintain deployed environments: patching, upgrades, health monitoring, and incident response. * Produce detailed as-built documentation, runbooks, and operational handoff materials. * Mentor Associate and mid-level Delivery Engineers and review their work. ## Related Videos - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Embracing the Hybrid Cloud: Unlocking Success with Ansible](https://www.wearedevelopers.com/videos/932-embracing-the-hybrid-cloud-unlocking-success-with-ansible) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)