Lead Engineer I – F5 Technical SME
KPMG US · Des Moines, IA · 1 mo ago
HybridFull-time
We need to output HTML fragment with sections: About the role? The posting includes intro about KPMG, but we should not repeat job title as heading. We need sections for Responsibilities, Qualifications, Benefits, maybe Pay? The posting mentions salary ranges via link but not actual numbers; we should not create Pay section unless actual salary stated. It says "If required, the ranges displayed below or via the URL below are specifically for those potential hires...". No explicit numbers, so we should not create Pay section. Benefits: they mention comprehensive benefits package, medical, dental, vision, disability, life insurance, 401(k), personal well-being, PTO, holidays, breaks. So we can include Benefits section. Schedule: not mentioned explicitly, only standard work hours referenced but not specific. So no Schedule.
We need to use for section headings. Use
for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove visa sponsorship statement? That's part of Qualifications? It's a requirement: "Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for ...)". That's a qualification/requirement, so we should keep it under Qualifications.
We need to include About the role? The intro paragraph about KPMG being great place to work etc. Could be considered "About the role" or maybe not needed. The instruction: "Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can include About the role if there is content. The intro includes description of KPMG and the role. That seems appropriate for About the role. We'll keep that as prose.
We must not repeat the job title as a heading. The job title is "Manager, Network Engineer – F5 Technical SME". We'll not put that as heading.
We need to output only HTML fragment, no /, no markdown fences.
Let's extract content:
About the role: "Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization."
We could keep that as a paragraph.
Responsibilities: list bullet points from "Responsibilities:" block.
Let's list them:
- Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
- Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
- Architect, deploy, and manage comprehensive F5 security solutions—including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection—partnering with cybersecurity teams to enforce Zero Trust and robust application defense
- Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs and Infrastructure-as-Code (IaC)
- Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
- Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events. Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
We need to keep the last sentence as part of that bullet.
Qualifications: list bullet points from "Qualifications:" block.
Let's extract:
- Minimum five years of recent in enterprise network engineering, with minimum three years of dedicated F5 engineering and architecture in large-scale, high-availability environments; experience in highly regulated sectors like financial services or healthcare preferred
- Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
- Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM/AWAF, AFM), BIG-IQ, next-gen hardware architectures (VELOS, rSeries, iSeries, VIPRION), and F5OS
- Comprehensive expertise in core networking protocols and enterprise security architectures, including BGP, TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, routing and switching, as well as implementing Zero Trust frameworks and enterprise WAF/DDoS mitigation
- Demonstrated hands-on proficiency in network automation and modern provisioning workflows using Python, Ansible, Terraform, Git, REST APIs, and Infrastructure-as-Code (IaC) practices, with familiarity in Kubernetes ingress/service mesh or multi-cloud networking
- Proven track record in strategic technology planning, high-stakes problem resolution, architecture documentation, risk mitigation, and executive-level cross-functional communication to lead major migrations and mentor engineering teams
- Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Benefits: from paragraph: "In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work."
We should keep that as list? It's prose with details; we can make a - for each benefit item: medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, personal well-being benefits, Personal Time Off, holidays, two breaks per year. Also mention that details available at link. We'll keep as list.
We must not include Pay section because no explicit salary numbers.
We must not include Schedule section (no explicit schedule). The mention of standard work hours is vague; we can skip.
We must remove boilerplate: EEO statements, visa sponsorship? Actually visa sponsorship is a qualification, we kept. EEO statements: "KPMG is an equal opportunity employer..." etc. Remove. Also remove "No phone calls or agencies please." etc. Remove "KPMG recruits on a rolling basis..." etc. Remove "Los Angeles County applicants..." etc. Also remove link to salary ranges? Might be considered boilerplate but it's about pay transparency; we are not including Pay section, but we could keep the link as part of Benefits? Probably not needed. The instruction: remove duplicated lines, application instructions. The link to salary ranges is not application instruction but maybe considered boilerplate; but it's about pay transparency. Since we are not including Pay, we can drop that link. Also drop "Follow this link to obtain salary ranges by city outside of CA: ..." as it's about pay. Also drop "KPMG offers a comprehensive compensation and benefits package." (somewhat redundant). We'll keep benefits description.
Now construct HTML:
About the role
Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization.
Responsibilities
- Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
- Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
- Architect, deploy, and manage comprehensive F5 security solutions—including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection—partnering with cybersecurity teams to enforce Zero Trust and robust application defense
- Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs and Infrastructure-as-Code (IaC)
- Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
- Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events. Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications
- Minimum five years of recent in enterprise network engineering, with minimum three years of dedicated F5 engineering and architecture in large-scale, high-availability environments; experience in highly regulated sectors like financial services or healthcare preferred
- Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
- Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM
for prose. We must preserve all substantive information, not invent or summarize away detail. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, application instructions. Also remove visa sponsorship statement? That's part of Qualifications? It's a requirement: "Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for ...)". That's a qualification/requirement, so we should keep it under Qualifications. We need to include About the role? The intro paragraph about KPMG being great place to work etc. Could be considered "About the role" or maybe not needed. The instruction: "Use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule)." So we can include About the role if there is content. The intro includes description of KPMG and the role. That seems appropriate for About the role. We'll keep that as prose.
We must not repeat the job title as a heading. The job title is "Manager, Network Engineer – F5 Technical SME". We'll not put that as heading.
We need to output only HTML fragment, no /, no markdown fences.
Let's extract content:
About the role: "Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization."
We could keep that as a paragraph.
Responsibilities: list bullet points from "Responsibilities:" block.
Let's list them:
- Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
- Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
- Architect, deploy, and manage comprehensive F5 security solutions—including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection—partnering with cybersecurity teams to enforce Zero Trust and robust application defense
- Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs and Infrastructure-as-Code (IaC)
- Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
- Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events. Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
We need to keep the last sentence as part of that bullet.
Qualifications: list bullet points from "Qualifications:" block.
Let's extract:
- Minimum five years of recent in enterprise network engineering, with minimum three years of dedicated F5 engineering and architecture in large-scale, high-availability environments; experience in highly regulated sectors like financial services or healthcare preferred
- Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
- Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM/AWAF, AFM), BIG-IQ, next-gen hardware architectures (VELOS, rSeries, iSeries, VIPRION), and F5OS
- Comprehensive expertise in core networking protocols and enterprise security architectures, including BGP, TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, routing and switching, as well as implementing Zero Trust frameworks and enterprise WAF/DDoS mitigation
- Demonstrated hands-on proficiency in network automation and modern provisioning workflows using Python, Ansible, Terraform, Git, REST APIs, and Infrastructure-as-Code (IaC) practices, with familiarity in Kubernetes ingress/service mesh or multi-cloud networking
- Proven track record in strategic technology planning, high-stakes problem resolution, architecture documentation, risk mitigation, and executive-level cross-functional communication to lead major migrations and mentor engineering teams
- Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa)
Benefits: from paragraph: "In addition, KPMG is proud to offer a comprehensive, competitive benefits package, with options designed to help you make the best decisions for yourself, your family, and your lifestyle. Available benefits are based on eligibility. Our Total Rewards package includes a variety of medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, and a robust suite of personal well-being benefits to support your mental health. Depending on job classification, standard work hours, and years of service, KPMG provides Personal Time Off per fiscal year. Additionally, each year KPMG publishes a calendar of holidays to be observed during the year and provides eligible employees two breaks each year where employees will not be required to use Personal Time Off; one is at year end and the other is around the July 4th holiday. Additional details about our benefits can be found towards the bottom of our KPMG US Careers site at Benefits & How We Work."
We should keep that as list? It's prose with details; we can make a - for each benefit item: medical and dental plans, vision coverage, disability and life insurance, 401(k) plans, personal well-being benefits, Personal Time Off, holidays, two breaks per year. Also mention that details available at link. We'll keep as list.
We must not include Pay section because no explicit salary numbers.
We must not include Schedule section (no explicit schedule). The mention of standard work hours is vague; we can skip.
We must remove boilerplate: EEO statements, visa sponsorship? Actually visa sponsorship is a qualification, we kept. EEO statements: "KPMG is an equal opportunity employer..." etc. Remove. Also remove "No phone calls or agencies please." etc. Remove "KPMG recruits on a rolling basis..." etc. Remove "Los Angeles County applicants..." etc. Also remove link to salary ranges? Might be considered boilerplate but it's about pay transparency; we are not including Pay section, but we could keep the link as part of Benefits? Probably not needed. The instruction: remove duplicated lines, application instructions. The link to salary ranges is not application instruction but maybe considered boilerplate; but it's about pay transparency. Since we are not including Pay, we can drop that link. Also drop "Follow this link to obtain salary ranges by city outside of CA: ..." as it's about pay. Also drop "KPMG offers a comprehensive compensation and benefits package." (somewhat redundant). We'll keep benefits description.
Now construct HTML:
About the role
Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization.
Responsibilities
- Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
- Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
- Architect, deploy, and manage comprehensive F5 security solutions—including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection—partnering with cybersecurity teams to enforce Zero Trust and robust application defense
- Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs and Infrastructure-as-Code (IaC)
- Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
- Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events. Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications
- Minimum five years of recent in enterprise network engineering, with minimum three years of dedicated F5 engineering and architecture in large-scale, high-availability environments; experience in highly regulated sectors like financial services or healthcare preferred
- Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
- Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM
About the role
Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering real results for our clients. It's also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it's no wonder we're consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Seramount, Fair360 and others. If you're as passionate about your future as we are, join our team. KPMG is currently seeking a Manager, Network Engineer – F5 Technical SME to join our Digital Nexus organization.
Responsibilities
- Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
- Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
- Architect, deploy, and manage comprehensive F5 security solutions—including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection—partnering with cybersecurity teams to enforce Zero Trust and robust application defense
- Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST APIs and Infrastructure-as-Code (IaC)
- Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
- Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events. Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications
- Minimum five years of recent in enterprise network engineering, with minimum three years of dedicated F5 engineering and architecture in large-scale, high-availability environments; experience in highly regulated sectors like financial services or healthcare preferred
- Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
- Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM