This is a W2, fully remote Associate Deployment Engineer role on an active funded contract, focused on deploying and sustaining AppGate-based Zero Trust Network Access (ZTNA) solutions across U.S. Federal and DoD environments. Compensation runs $137K–$151K. The position requires an active Secret clearance at minimum — there is no sponsorship pathway and no exceptions. Candidates should have 2–4 years of hands-on systems, network, or security engineering experience, working knowledge of Linux administration, and scripting ability in Bash, PowerShell, or Python. Experience integrating identity providers (Active Directory, LDAP, SAML, OIDC) is strongly preferred. Travel is approximately 50%, episodic to customer sites and AFB installations across the U.S. While candidates near Scott AFB IL, Gunter AFB AL, Kirtland AFB NM, or the MD/DC/VA metro will face lighter travel burdens, the role is open to all U.S.-based candidates. A bachelor's degree is preferred but the hiring manager will evaluate veterans and practitioners with equivalent hands-on experience on a case-by-case basis.
What you'll do
- Install and configure AppGate ZTNA controllers, gateways, and clients following senior engineer direction and established runbooks
- Integrate the ZTNA platform with identity providers and authentication sources (Active Directory, LDAP, SAML, OIDC, RADIUS)
- Troubleshoot deployment issues using log analysis, shell access, and basic packet inspection
- Write and modify scripts in Bash, PowerShell, or Python to automate deployment and sustainment tasks
- Apply STIG and SCAP hardening configurations as directed to meet federal security requirements
- Perform sustainment activities including patching, upgrades, health checks, and ticket resolution
- Maintain accurate deployment documentation and configuration records; escalate complex issues with well-documented context
Mission
Zero Trust Network Access (ZTNA) platform deployment and sustainment in U.S. Federal and DoD environments
Required skills
- Linux systems administration
- Bash or PowerShell or Python scripting
- Active Directory
- LDAP
- SAML / OIDC authentication
- TCP/IP and DNS networking fundamentals
- Firewall and VPN fundamentals
- Cloud or virtualization platform familiarity