Principal Federal Solution Architect

*Remote Position but ideally looking for someone in the DMV area. 

Principal Federal Solution Architect - Zero Trust, Automation & Identity

The Senior Solutions Architect is the senior technical authority responsible for the design, integration, automation, and operational success of AppGate's Zero Trust Network Access (ZTNA) platform across U.S. Federal and DoD environments.

This role requires deep, hands-on engineering expertise, not abstract or presentation-level knowledge. The successful candidate must be capable of operating systems, writing and reviewing code, debugging live integrations, and troubleshooting failures at the protocol, OS, and application level. This role is intended for practitioners who build, integrate, and operate secure access systems in real-world Federal environments.

Responsibilities

Serve as final escalation point for the most complex Federal deployments

Lead deep technical architecture reviews with government and integrator teams

Mentor senior Solution Architects and engineers

Influence product direction related to automation, integration, and operability

Ability to work extended hours or flexible schedules as needed to meet customer needs, deadlines, and escalations

This role may require more than 40 hours per week

Travel Requirements

Flexibility and ability to travel to meet project and customer needs

Travel requirements will vary depending on the project and may exceed 50 percent

Technical Depth Expectations

For every domain listed, candidates are expected to demonstrate operational competence, including the ability to:

Configure and operate systems directly

Debug failures using logs, shell access, packet captures, and code inspection

Write and modify scripts or automation to solve real problems

Explain system behavior based on implementation, not abstraction

Design and architect systems aligned with customer requirements for Appgate ZTNA

Integrate Appgate ZTNA with third party systems and sources of trust or risk telemetry, including identity providers such as SAML, OIDC, RADIUS, LDAP, NGFWs, entitlement automation systems, SIEM, SOAR, ITSM, and others

Provide detailed documentation and effective information handoff

This role requires engineers who actively operate systems, write scripts, debug APIs, and analyze packet captures. Candidates whose experience is limited to diagrams, presentations, or vendor marketing materials will not be successful.

Core Responsibilities and Required Expertise

Linux Systems and Access Enforcement Platforms

Serve as a technical authority for Linux-based Zero Trust enforcement infrastructure

Operate and manage systems via SSH, including secure key-based access and privilege separation

Demonstrate deep hands-on knowledge of Bash scripting, process management, systemd, filesystem layout, permissions, and logging

Strong understanding of Linux networking internals including routing tables, policy routing, interface binding, traffic steering, and iptables or nftables

Diagnose complex cross-platform issues involving Linux, Windows, and macOS systems

JavaScript and REST API Integration

Develop and maintain JavaScript-based logic for integration and automation

Build and troubleshoot REST API integrations with systems such as Microsoft Graph and ServiceNow

Strong understanding of REST APIs, JSON data models, and authentication methods including OAuth, tokens, and certificates

Experience working in API-first and security-as-code environments

Containers and Kubernetes

Architect Zero Trust access for containerized and microservices-based workloads

Support Kubernetes environments including networking, service exposure, and service-to-service access

Ensure solutions scale across on-premises and cloud environments

Automation and Infrastructure as Code

Design and implement Infrastructure as Code using Terraform

Implement Configuration as Code and GitOps workflows

Integrate Zero Trust solutions into CI/CD pipelines

Ensure automation is version controlled, repeatable, auditable, and API-driven

Identity and Authentication

Architect identity-centric access solutions using enterprise identity systems

Hands-on experience with Active Directory, LDAP, Kerberos, SAML, OIDC, and RADIUS

Troubleshoot DNS across Windows, macOS, and Linux platforms

Experience with PKI, certificates, and authentication flows

Cloud and Infrastructure

Experience with virtualization platforms such as VMware, ESXi, and KVM

Experience designing secure solutions in AWS GovCloud, Azure Government, and Google Cloud Platform

Understanding of networking and IAM policies

Experience with AI or machine learning security is a plus

Endpoint Scripting

Design and troubleshoot scripts for endpoint posture and access decisions

PowerShell for Windows environments

Bash for macOS and Linux environments

Ensure scripts meet Federal security requirements

Networking and Security

Strong understanding of IP networking, TCP, ARP, TLS, and encryption

Familiarity with VPNs, ZTNA, MPLS, and SD-WAN

Experience with network security tools and architectures

Ability to troubleshoot using tools such as tcpdump and Wireshark

Compliance

Support STIG compliance for Linux systems

Experience with SCAP and OpenSCAP tools

Support RMF and ATO processes

Communicate effectively with security stakeholders

Integration and Interoperability

Integrate with identity systems, security tools, and enterprise platforms

Support multi-vendor Zero Trust environments

Work with partners and integrators on joint solutions

Leadership

Serve as escalation lead for complex deployments

Lead technical discussions with stakeholders

Mentor engineers and architects

Contribute to product direction

Required Qualifications

12 or more years of experience in networking, security, systems, or automation engineering

Strong experience with Bash, PowerShell, JavaScript, Linux, and REST APIs

Experience with identity systems such as Active Directory, DNS, PKI, SAML, and OIDC

Experience supporting Federal or high-security environments

Ability to obtain or maintain a U.S. security clearance

Willingness to work flexible hours as needed

Travel

Ability to travel as required by project needs

Travel may exceed 50 percent depending on the project

 

*** This is a direct hire for AppGate. This position is remote though candidates who live in the DMV are ideal.