> Markdown version of [/jobs/ext/4674910-senior-network-zero-trust-engineer](https://www.wearedevelopers.com/jobs/ext/4674910-senior-network-zero-trust-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Network Zero Trust Engineer - **Company:** Gormat, LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** IEEE 802.1Q, Application Programming Interfaces (APIs), Border Gateway Protocol, Complex Networks, Cyber Security, System Configuration, Domain Name System (DNS), Multi-Factor Authentication, Internet Protocol Security (IP SEC), Virtual Private Networks (VPN), Multi-protocol Systems, Python (Programming Language), Network Security, Network Layer, Netconf, Network Diagrams, Network Connections, Network Monitoring, Open Shortest Path First (OSPF), Public Key Infrastructure, Ansible, Zero Trust Network Access, Security Information and Event Management, Software Deployment, Systems Integration, Virtual Local Area Networks, VMware VSphere, Wide Area Networks, Data Logging, Network Routers, BIG-IP Local Traffic Manager (LTM), Firewalls (Computer Science), SC Clearance, SolarWinds (Software), Palo Alto Networks, Open Network Automation Platform, Splunk, Cisco Switches, Big Ip, Cisco - **Published:** November 11, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9305115/senior-network-zero-trust-engineer ## About the Role The ideal candidate will have extensive hands-on experience designing, implementing, integrating, and troubleshooting complex network environments, with strong technical expertise in Cisco SD-WAN, Palo Alto Networks, and F5 technologies., * 10+ years of experience in enterprise or Department of Defense (DoD) network and network security engineering. * At least 4 years of hands-on production experience with Cisco SD-WAN, Palo Alto Networks, and F5 technologies. * Demonstrated experience designing, deploying, configuring, and troubleshooting Cisco Catalyst SD-WAN environments. * Hands-on experience with both Palo Alto Networks Next-Generation Firewalls and F5 BIG-IP technologies. * Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking. * Strong understanding of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec. * Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, change control, and network boundary approval processes. * Experience designing and integrating Zero Trust network architectures in large-scale environments. * Ability to develop and maintain technical documentation, including network diagrams, IP plans, and as-built configurations. * Strong communication, troubleshooting, and cross-functional collaboration skills. * Bachelor's degree in a technical field or equivalent experience. * At least one IAT Level II certification (e.g., Security+ CE). * Active Secret Clearance. * U.S. citizenship., * IAT Level III certification (e.g., CISSP). * Cisco Certified Network Professional (CCNP) Enterprise. * Palo Alto Networks Certified Network Security Engineer (PCNSE). * F5 BIG-IP administration certification. * Cisco 300-415 ENSDWI certification. * Experience supporting Air Force Network (AFNet) or base communications environments. * Experience with TACLANE devices, SIPRNet, and DISA network connections. * Experience with Cisco 8500/9600 platforms and Cisco Catalyst Center. * Familiarity with DoD Zero Trust Architecture, Zero Trust Network Access (ZTNA), and DoD Zero Trust strategy. * Experience with Python, Ansible, NETCONF, or RESTCONF. * Experience with network monitoring and logging platforms such as SolarWinds, Splunk, or Cribl. * Experience with VMware vSphere. Technical Environment Cisco Catalyst SD-WAN, Cisco routing and switching, Palo Alto Networks NGFW, F5 BIG-IP, BGP, OSPF, OMP, VRFs, MPLS, VLANs, IPsec, PKI, SIEM, MFA, SIPRNet, TACLANE, Zero Trust Architecture, public cloud networking, Python, Ansible, and network automation tools. ## Description We are seeking an experienced Senior Network Zero Trust Engineer to support the modernization of enterprise network infrastructure through the implementation of Cisco SD-WAN, next-generation firewalls, application delivery technologies, and Zero Trust security principles., * Design, configure, implement, and maintain Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies. * Engineer and troubleshoot service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations. * Design and implement service chaining, traffic steering, and symmetric routing paths across network security services. * Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls, including virtual routers, security zones, SSL/TLS decryption, and WildFire. * Configure, manage, and troubleshoot F5 BIG-IP technologies, including Local Traffic Manager (LTM), Advanced WAF, TLS, pools, and health monitors. * Integrate network security technologies and Zero Trust controls to support secure enterprise connectivity. * Implement and troubleshoot Quality of Service (QoS), DSCP markings, and traffic prioritization. * Conduct site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements. * Support implementation planning, scheduled change windows, cutovers, and rollback procedures. * Participate in integration lab testing, validation, and performance assessments before production deployment. * Support SIPRNet connectivity and TACLANE integration requirements. * Coordinate with network, cybersecurity, infrastructure, and engineering teams to resolve integration issues. * Implement security logging and SIEM log forwarding, and maintain configuration evidence. * Develop and maintain network diagrams, IP plans, as-built documentation, and change records. * Support automation initiatives using Python, Ansible, and network APIs. * Provide technical guidance and mentorship to network engineering team members.