Senior Solution Architect Federal

Position Overview

The Senior Solutions Architect is the senior technical authority responsible for the design, integration, automation, and operational success of AppGate's Zero Trust Network Access (ZTNA) platform across U.S. Federal and DoD environments.

This role requires deep, hands-on engineering expertise, not abstract or presentation-level knowledge. The successful candidate must be capable of operating systems, writing and reviewing code, debugging live integrations, and troubleshooting failures at the protocol, OS, and application level. This is a role for practitioners who build, integrate, and operate secure access systems in real-world Federal environments.

Technical Depth Expectations (Applies to All Areas Below)

For every domain listed, candidates are expected to demonstrate operational competence, including the ability to:

• Configure and operate systems directly
• Debug failures using logs, shell access, packet captures, and code inspection
• Write and modify scripts or automation to solve real problems
• Explain system behavior based on implementation, not abstraction
• Design and Architect systems that align with customer requirements for Appgate ZTNA
• Integrate Appgate ZTNA with other 3rd party systems and sources of trust or risk telemetry including Identity Providers (SAML, OIFC, RADIUS, LDAP(s)), NGFWs, Entitlement Automation systems, SIEM/SOAR, ITSM, and many others.
• Detailed documentation and information hand-off skills are also required

This role requires engineers who actively operate systems, write scripts, debug APIs, and analyze packet captures. Candidates whose experience is limited to diagrams, presentations, or vendor marketing materials will not be successful.

Core Responsibilities & Required Expertise

Linux Systems & Access Enforcement Platforms (Critical)

• Serve as a technical authority for Linux-based Zero Trust enforcement infrastructure
• Operate and manage systems via SSH, including secure key-based access and privilege separation
• Demonstrate deep, hands-on knowledge of:
• Bash scripting (required)
• Process management and systemd
• Filesystem layout, permissions, and logging
• Strong understanding of Linux networking internals:
• Routing tables and policy routing
• Interface binding and traffic steering
• iptables / nftables
• Diagnose complex cross-platform issues where Linux enforcement points interact with Windows and macOS endpoints

JavaScript & REST API Integration Engineering (Critical)

• Develop and maintain JavaScript-based logic executed on Appgate appliances to enable integration and automation
• Build and troubleshoot REST API integrations with external systems, including:
• Microsoft Graph API
• ServiceNow REST APIs
• Identity, ITSM, logging, NGFW, and security platforms
• Apply strong understanding of:
• RESTful API design and consumption
• JSON data models and schema validation
• Authentication methods (OAuth, tokens, certificates)
• Operate within an API-first, Security-as-Code/Everything-as-Code architecture

Containers & Kubernetes Architecture

• Architect Zero Trust access enforcement for containerized and microservices-based workloads
• Support Kubernetes environments, including:
• Sidecar injection and operator-based enforcement models
• Secure service exposure and service-to-service access
• Integration with Kubernetes networking (CNI), ingress, and egress controls
• Ensure access models scale across on-premises and cloud-native environments

Automation, Infrastructure as Code & Configuration as Code

• Design and implement Infrastructure as Code (IaC) using Terraform
• Implement Configuration as Code (CaC) and GitOps workflows for:
• Appgate ZTNA Policies
• Appgate ZTNA Entitlements
• Integrations with 3rd party systems and Entitlement Engines
• Integrate Zero Trust deployments into CI/CD pipelines aligned with Federal DevSecOps standards
• Ensure all automation is:
• Version-controlled
• Repeatable
• Auditable
• API-driven

Identity & Authentication Engineering (Critical)

• Architect identity-centric access solutions using enterprise identity systems as the authoritative control plane
• Deep han