> Markdown version of [/jobs/ext/4669175-network-zero-trust-engineer](https://www.wearedevelopers.com/jobs/ext/4669175-network-zero-trust-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Zero Trust Engineer - **Company:** Gormat, LLC - **Location:** United States (Remote available) - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** IEEE 802.1Q, Application Programming Interfaces (APIs), Border Gateway Protocol, Cyber Security, System Configuration, Domain Name System (DNS), Multi-Factor Authentication, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Multi-protocol Systems, Python (Programming Language), Network Security, Network Layer, Netconf, Network Diagrams, Network Connections, Network Monitoring, Open Shortest Path First (OSPF), Public Key Infrastructure, Ansible, Zero Trust Network Access, Security Information and Event Management, Software Deployment, Virtual Local Area Networks, VMware VSphere, Wide Area Networks, Data Logging, Firewalls (Computer Science), SC Clearance, SolarWinds (Software), Palo Alto Networks, Open Network Automation Platform, Splunk, Cisco Switches, Big Ip, Cisco - **Published:** November 11, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9305116/network-zero-trust-engineer ## About the Role The ideal candidate will have practical experience working with Cisco SD-WAN and either Palo Alto Networks or F5 technologies in enterprise or DoD network environments., * 8+ years of experience in enterprise or Department of Defense (DoD) network engineering. * At least 2 years of hands-on Cisco SD-WAN experience in combination with Palo Alto Networks or F5 technologies. * Demonstrated experience configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments. * Hands-on experience with at least one of the following: + Palo Alto Networks Next-Generation Firewalls + F5 BIG-IP technologies * Working knowledge of DoD Zero Trust controls and network security principles. * Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking. * Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec. * Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, and change control. * Ability to troubleshoot network connectivity and security integration issues in complex environments. * Ability to develop and maintain technical documentation, including network diagrams, IP plans, and configuration records. * Strong communication, troubleshooting, and teamwork skills. * At least one IAT Level II requirements (e.g., Security+ CE). * Active Secret Clearance * U.S. citizenship., * Bachelor's degree in a technical field. * Cisco Certified Network Professional (CCNP) Enterprise. * Palo Alto Networks Certified Network Security Engineer (PCNSE). * F5 BIG-IP administration certification. * Cisco 300-415 ENSDWI certification. * Experience supporting Air Force Network (AFNet) or base communications environments. * Experience with TACLANE devices, SIPRNet, and DISA network connections. * Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center. * Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy. * Experience with Python, Ansible, NETCONF, or RESTCONF. * Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl. * Experience with VMware vSphere. Technical Environment Cisco Catalyst SD-WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG-IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools. ## Description We are seeking a Network Zero Trust Engineer to support the deployment, integration, and maintenance of secure enterprise network infrastructure. This position will focus on hands-on configuration, testing, troubleshooting, and implementation of Cisco SD-WAN, network security technologies, and Zero Trust capabilities., * Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies. * Support service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations. * Assist with service chaining, traffic steering, and routing integration across network security services. * Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls and/or F5 BIG-IP technologies. * Support network security integrations and Zero Trust controls across enterprise network environments. * Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization. * Assist with site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements. * Support implementation planning, scheduled change windows, cutovers, and rollback procedures. * Participate in integration lab testing, validation, and performance assessments before production deployment. * Support SIPRNet connectivity and TACLANE integration requirements. * Coordinate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues. * Support security logging, SIEM log forwarding, and configuration documentation. * Maintain network diagrams, IP plans, as-built documentation, and change records. * Assist with network automation and configuration tasks using Python, Ansible, or network APIs.