Network Zero Trust Engineer

Gormat

. Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies .

Posted 11/10/2026full-timeRemote • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive experience in configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments and Palo Alto Networks Next-Generation Firewalls. Proficient in network security integrations, Zero Trust controls, and maintaining technical documentation in compliance with DoD standards.

Highest-signal resume keywords

Cisco SD-WAN ConfigurationPalo Alto Networks FirewallsNetwork Security IntegrationsDoD Zero Trust ControlsIAT Level II Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cisco Catalyst SD-WANBGPOSPFIPsecQoSTraffic PrioritizationNetwork AutomationPythonAnsibleMPLS Layer 3 VPNs

Soft Skills

TroubleshootingTechnical DocumentationCollaboration

Tools & Technologies

F5 BIG-IPSIEMTACLANESIPRNet

Certifications & Qualifications

Security+ CE

Industry Keywords

DoD Network EngineeringDISA STIGsNIST SP 800-53Change ControlPKIMFA

Tech Stack

Tools & technologies

AnsibleCloudCyber SecurityDNSFirewallsPython

About the role

Key responsibilities & impact

Configure, deploy, maintain, and troubleshoot Cisco Catalyst SD-WAN environments, including device groups, templates, profiles, and policies
Support service VRFs, BGP, OSPF, OMP, TLOCs, TLOC extensions, IPsec tunnels, BFD, and high-availability configurations
Assist with service chaining, traffic steering, and routing integration across network security services
Configure, manage, and troubleshoot Palo Alto Networks Next-Generation Firewalls and/or F5 BIG-IP technologies
Support network security integrations and Zero Trust controls across enterprise network environments
Implement and troubleshoot QoS, DSCP markings, and traffic prioritization
Assist with site readiness assessments, including IP and VLAN allocations, management enclave routing, boundary bandwidth, DNS/NTP dependencies, and deployment requirements
Support implementation planning, scheduled change windows, cutovers, and rollback procedures
Participate in integration lab testing, validation, and performance assessments before production deployment
Support SIPRNet connectivity and TACLANE integration requirements
Coordinate with network, cybersecurity, infrastructure, and engineering teams to troubleshoot integration issues
Support security logging, SIEM log forwarding, and configuration documentation
Maintain network diagrams, IP plans, as-built documentation, and change records
Assist with network automation and configuration tasks using Python, Ansible, or network APIs

Requirements

What you’ll need

8+ years of experience in enterprise or Department of Defense (DoD) network engineering
At least 2 years of hands-on Cisco SD-WAN experience in combination with Palo Alto Networks or F5 technologies
Demonstrated experience configuring, deploying, and troubleshooting Cisco Catalyst SD-WAN environments
Hands-on experience with Palo Alto Networks Next-Generation Firewalls or F5 BIG-IP technologies
Working knowledge of DoD Zero Trust controls and network security principles
Experience with network security integrations involving PKI, certificates, SIEM log forwarding, MFA, and public cloud networking
Working knowledge of BGP, OSPF, VRFs, MPLS Layer 3 VPNs, VLANs (802.1Q and Q-in-Q), and IPsec
Experience supporting DoD or federal network environments, including DISA STIGs, NIST SP 800-53, configuration hardening, and change control
Ability to troubleshoot network connectivity and security integration issues in complex environments
Ability to develop and maintain technical documentation, including network diagrams, IP plans, and configuration records
At least one IAT Level II requirement (e.g., Security+ CE)
Active Secret clearance at the time of submission, with SIPRNet eligibility
U.S. citizenship