Principal Sales Engineer, Federal Civilian

About App Gate

App Gate secures the most valuable assets of federal agencies with its high-performance Zero Trust Network Access (ZTNA) solution. App Gate ZTNA is the only direct-routed ZTNA solution that enforces least-privilege access across distributed, hybrid and multi-cloud environments, helping agencies meet mandates such as the CISA Zero Trust Maturity Model, OMB Memorandum M-22-09 and Trusted Internet Connections (TIC) 3.0. App Gate is already operational across multiple U.S. military branches, including the Marine Corps, Navy, Air Force and Space Force, and supports a growing number of federal civilian agencies.

Learn more at

App Gate secures the most valuable assets of federal agencies with its high-performance Zero Trust Network Access (ZTNA) solution. App Gate ZTNA is the only direct-routed ZTNA solution that enforces least-privilege access across distributed, hybrid and multi-cloud environments, helping agencies meet mandates such as the CISA Zero Trust Maturity Model, OMB Memorandum M-22-09 and Trusted Internet Connections (TIC) 3.0. App Gate is already operational across multiple U.S. military branches, including the Marine Corps, Navy, Air Force and Space Force, and supports a growing number of federal civilian agencies.

Learn more at

This is a senior, principal-level pre-sales role leading the technical engagement across App Gate s federal civilian accounts. You will work directly with agency stakeholders to understand their requirements and design Zero Trust solutions that fit their mission, security and compliance needs. Much of that work means aligning App Gate to the frameworks agencies are measured against, such as the CISA Zero Trust Maturity Model (ZTMM), TIC 3.0, Continuous Diagnostics and Mitigation (CDM), OMB M-22-09 and FedRAMP.

The role is built as a path to a Field CTO position for the federal civilian business.

Day to day, the work spans whiteboard sessions, solution design and configuration, proofs of concept and customer presentations. You will act as a trusted advisor to agency CIOs, CISOs and program leaders, and partner closely with App Gate s sales, product and engineering teams along with systems integrators and channel partners to design and deliver solutions built on App Gate ZTNA.

Clear communication and the ability to translate technical detail for both engineers and executives are essential.

Technical engagement and solution design

• Lead the technical engagement on assigned federal civilian opportunities, from discovery through proof of concept and close
• Run discovery and requirements sessions, and document the technical and business needs behind each agency s solution
• Design the App Gate solution, including configuration, quoting and the internal approvals it requires
• Serve as technical lead on RFP and proposal responses
• Prepare and deliver technical presentations and product demonstrations for customers
• Provide design, integration and implementation support for new deployments and upgrades
• Support account teams on strategic and tactical account planning, and position App Gate against other approaches in the market

• Act as the team s technical authority on Zero Trust, mapping App Gate ZTNA to the CISA Zero Trust Maturity Model, TIC 3.0 and CDM
• Mentor sales engineers and set the technical standards, demo environments and proof-of-concept playbooks the team works from
• Advise agency CIOs, CISOs and program leaders on their Zero Trust modernization roadmaps
• Work with App Gate product and engineering teams to bring federal civilian requirements, including FedRAMP, into the roadmap
• Train internal teams, customers and partners on App Gate products, and carry the voice of the customer back to product and development
• Represent App Gate at conferences, briefings and industry events as the role grows into a Field CTO

• Knowledge of the mandates and frameworks agencies are measured against, including the CISA Zero Trust Maturity Model, TIC 3.0, CDM, OMB M-22-09, Executive Order 14028, FISMA and NIST SP 800-207 and 800-53
• Familiarity with federal procurement vehicles and bid processes, such as GSA Multiple Award Schedule, NASA SEWP, NITAAC CIO-SP3 and CIO-SP4 and CDM DEFEND
• Understanding of FedRAMP authorization, High Value Asset protection and the EINSTEIN national cybersecurity program

• Hands-on experience designing, deploying or selling solutions on major public cloud platforms such as AWS, Microsoft Azure, Google Cloud and IBM Cloud
• Network security experience across firewalls, next-generation firewalls, network access control and VPNs, including the move from legacy VPN to ZTNA and SASE
• Authentication and identity, including Active Directory, LDAP, RADIUS, Kerberos and SAML, along with federal identity standards such as PIV cards, derived credentials and ICAM
• Encryption standards such as AES, PKI and RSA, including FIPS 140-2 and 140-3 validated…