> Markdown version of [/jobs/ext/2653370-lead-specialist-federal-cyber-appgate-engineer](https://www.wearedevelopers.com/jobs/ext/2653370-lead-specialist-federal-cyber-appgate-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Specialist, Federal Cyber AppGate Engineer

- **Company:** Kpmg LLP
- **Location:** McLean, VA, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Identity and Access Management, Network Security, Zero Trust Network Access, Security Information and Event Management, Systems Integration
- **Published:** August 1, 2026
- **Apply:** https://www.kpmguscareers.com/jobdetail/?jobId=135875

## About the Role

* A minimum of five years of experience with network security technology and diverse Zero Trust Network Access (ZTNA) solutions, including hands-on AppGate SDP implementation experience; U.S. Federal government consulting experience preferred
 * Bachelor's degree from an accredited college/university
 * Two years of leadership or managerial experience
 * Broad, vendor-agnostic knowledge of ZTNA platforms and Software-Defined Perimeter (SDP) architectures
 * Experience designing, implementing, and managing complex, context-based access policies and segmentation strategies at an enterprise scale
 * Strong understanding of Zero Trust principles and deployment patterns, with familiarity with relevant DoD frameworks, NIST 800-207, and large-scale enterprise environments
 * Experience integrating ZTNA solutions with comprehensive Identity and Access Management (IAM), Privileged Access Management (PAM), and ITSM systems
 * Preferred certifications: CISSP, CCSP, GIAC, AppGate
 * Ability to travel as required to support firm engagements
 * Applicant must possess a U.S. Government Secret clearance

## Description

* Manage and coordinate the implementation, administration, and continuous tuning of AppGate SDP platform components in support of broader enterprise Zero Trust Network Access (ZTNA) objectives
 * Architect, develop, and enforce dynamic, identity-centric security policies, granular micro segmentation rules, and context -aware trusted access models
 * Translate complex organizational security requirements into scalable, effective ZTNA policies across the environment
 * Lead technical workshops, requirements gathering, and workflow creation for securely and seamlessly onboarding mission application to the ZT Architecture
 * Integrate ZTNA tools (AppGate) with broader security ecosystem components including IAM, PAM, and SIEM solutions to achieve end-to-end Zero Trust automation and continuous monitoring
 * Mentor a team of engineers and analysts responsible for AppGate operations
 * Develop comprehensive solution documentation, operational runbooks, and policy guidelines, which contributing to project tracking and reporting
 * Interface with client stakeholders to ensure all ZTNA deployments and access policies rigorously align with compliance, security, and operational mission requirements


## Related Videos

- [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [AI Agents & Agentic AI](https://www.wearedevelopers.com/videos/2017-ai-agents-agentic-ai)
- [Developing ASP.NET Core Microservices with Dapr: A practical guide](https://www.wearedevelopers.com/videos/1528-developing-asp-net-core-microservices-with-dapr-a-practical-guide)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)