Key skills
DNSITSMJavaScriptKubernetesLinuxMacOSMicroservicesServiceNowBashPowerShellSAMLActive DirectoryREST APIZero Trust
About this role
Role Overview
- Serve as a technical authority for Linux-based Zero Trust enforcement infrastructure
- Operate and manage systems via SSH, including secure key-based access and privilege separation
- Demonstrate deep, hands-on knowledge of:
- Bash scripting (required)
- Process management and systemd
- Filesystem layout, permissions, and logging
- Strong understanding of Linux networking internals:
- Routing tables and policy routing
- Interface binding and traffic steering
- iptables / nftables
- Diagnose complex cross-platform issues where Linux enforcement points interact with Windows and macOS endpoints
- Develop and maintain JavaScript-based logic executed on Appgate appliances to enable integration and automation
- Build and troubleshoot REST API integrations with external systems, including:
- Microsoft Graph API
- ServiceNow REST APIs
- Identity, ITSM, logging, NGFW, and security platforms
- Operate within an API-first, Security-as-Code/Everything-as-Code architecture
- Architect Zero Trust access enforcement for containerized and microservices-based workloads
- Support Kubernetes environments, including:
- Sidecar injection and operator-based enforcement models
- Secure service exposure and service-to-service access
- Integrate with Kubernetes networking (CNI), ingress, and egress controls
- Enable Appgate to operate as a composable Zero Trust control within multi-vendor Federal architectures
- Serve as final escalation point for the most complex Federal deployments
- Lead deep technical architecture reviews with government and integrator teams
- Mentor senior Solution Architects and engineers
Requirements
- 12+ years in networking, security, systems, platform, or automation engineering roles
- Demonstrated mastery of:
- Bash
- PowerShell
- JavaScript
- Linux systems administration
- REST APIs and automation
- Strong experience with identity systems (Active Directory, DNS, PKI, SAML/OIDC)
- Experience supporting Federal or other high-assurance environments
- Ability to obtain or maintain a U.S. security clearance
- Ability to work extended hours / flextime as needed to meet customer needs / deadlines / escalations
- Flexibility and ability to travel to meet project and customer needs
- Travel requirements will vary depending on project and for some projects can exceed 50%
Tech Stack
- DNS
- ITSM
- JavaScript
- Kubernetes
- Linux
- MacOS
- Microservices
- ServiceNow