Principal Federal Solution Architect Security Clearance

Position: Principal Federal Solution Architect with Security Clearance
* Remote Position but ideally looking for someone in the DMV area.
Principal Federal Solution Architect - Zero Trust, Automation & Identity The Senior Solutions Architect is the senior technical authority responsible for the design, integration, automation, and operational success of App Gate's Zero Trust Network Access (ZTNA) platform across U.S. Federal and DoD environments. This role requires deep, hands-on engineering expertise, not abstract or presentation-level knowledge. The successful candidate must be capable of operating systems, writing and reviewing code, debugging live integrations, and troubleshooting failures at the protocol, OS, and application level.

This role is intended for practitioners who build, integrate, and operate secure access systems in real-world Federal environments. Responsibilities
* Serve as final escalation point for the most complex Federal deployments

* Lead deep technical architecture reviews with government and integrator teams

* Mentor senior Solution Architects and engineers

* Influence product direction related to automation, integration, and operability

* Ability to work extended hours or flexible schedules as needed to meet customer needs, deadlines, and escalations

* This role may require more than 40 hours per week
Travel Requirements
* Flexibility and ability to travel to meet project and customer needs

* Travel requirements will vary depending on the project and may exceed 50 percent
Technical Depth Expectations For every domain listed, candidates are expected to demonstrate operational competence, including the ability to:
* Configure and operate systems directly

* Debug failures using logs, shell access, packet captures, and code inspection

* Write and modify scripts or automation to solve real problems

* Explain system behavior based on implementation, not abstraction

* Design and architect systems aligned with customer requirements for Appgate ZTNA

* Integrate Appgate ZTNA with third party systems and sources of trust or risk telemetry, including identity providers such as SAML, OIDC, RADIUS, LDAP, NGFWs, entitlement automation systems, SIEM, SOAR, ITSM, and others

* Provide detailed documentation and effective information handoff
This role requires engineers who actively operate systems, write scripts, debug APIs, and analyze packet captures. Candidates whose experience is limited to diagrams, presentations, or vendor marketing materials will not be successful. Core Responsibilities and Required Expertise Linux Systems and Access Enforcement Platforms
* Serve as a technical authority for Linux-based Zero Trust enforcement infrastructure

* Operate and manage systems via SSH, including secure key-based access and privilege separation

* Demonstrate deep hands-on knowledge of Bash scripting, process management, systemd, file system layout, permissions, and logging

* Strong understanding of Linux networking internals including routing tables, policy routing, interface binding, traffic steering, and iptables or nftables

* Diagnose complex cross-platform issues involving Linux, Windows, and macOS systems
JavaScript and REST API Integration
* Develop and maintain JavaScript-based logic for integration and automation

* Build and troubleshoot REST API integrations with systems such as Microsoft Graph and Service Now

* Strong understanding of REST APIs, JSON data models, and authentication methods including OAuth, tokens, and certificates

* Experience working in API-first and security-as-code environments
Containers and Kubernetes
* Architect Zero Trust access for containerized and microservices-based workloads

* Support Kubernetes environments including networking, service exposure, and service-to-service access

* Ensure solutions scale across on-premises and cloud environments
Automation and Infrastructure as Code
* Design and implement Infrastructure as Code using Terraform

* Implement Configuration as Code and Git Ops workflows

* Integrate Zero Trust solutions into CI/CD pipelines

* Ensure automation is version controlled, repeatable, auditable, and API-driven
Identity and Authentication
* Architect identity-centric access solutions using enterprise identity systems

* Hands-on experience with Active Directory, LDAP, Kerberos, SAML, OIDC, and RADIUS

* Troubleshoot DNS across Windows, macOS, and Linux platforms

* Experience with PKI, certificates, and authentication flows
Cloud and Infrastructure
* Experience with virtualization platforms such as VMware, ESXi, and KVM

* Experience designing secure solutions in AWS Gov Cloud, Azure Government, and Google Cloud Platform

* Understanding of networking and IAM policies

* Experience with AI or machine learning security is a plus
Endpoint Scripting
* Design and troubleshoot scripts for endpoint posture and access decisions

* Power Shell for Windows environments

* Bash for macOS and Linux environments

* Ensure scripts meet Federal security requirements
Networking and Security
* Strong understanding of IP networking, TCP, ARP, TLS, and encryption

* Familiarity with…