Lead Engineer II - F5 Technical Lead/SME
KPMG US · Virginia Beach, VA · 1 mo ago
HybridFull-time
About the role
KPMG is currently seeking an Associate Director, Network Engineer – F5 Technical Lead to join our Digital Nexus organization.
Responsibilities
- Serve as the Subject Matter Expert (SME) and lead architect for enterprise-wide F5 Application Delivery Controller (ADC) platforms, defining strategic roadmaps, modernization initiatives, capacity planning, and multi-datacenter disaster recovery (DR) architectures
- Design and implement high-performance global and local load balancing (GLB), traffic steering, content switching, and custom programmatic traffic policies utilizing advanced iRules and iRulesLX across multi-region environments
- Architect, deploy, and manage comprehensive F5 security solutions including Advanced WAF (AWAF/ASM), AFM, APM, Bot Defense, and DDoS Protection partnering with cybersecurity teams to enforce Zero Trust and robust application defense
- Drive DevOps integration by developing automated provisioning, configuration management, and self-service deployment frameworks using Python, Ansible, Terraform, PowerShell, and REST AP
- Establish operational standards, lead firmware/lifecycle management, and resolve complex enterprise incidents through deep root cause analysis across TCP/IP, SSL/TLS, routing, DNS, and authentication flows
- Provide senior engineering leadership, mentor cross-functional network and application teams, lead technical design reviews and technology assessments, and serve as the primary escalation point for mission-critical platform events
- Act with integrity, professionalism, and personal responsibility to uphold KPMG's respectful and courteous work environment
Qualifications
- Minimum eight years of recent experience in enterprise network engineering, with a minimum six years of dedicated F5 engineering and architecture in large-scale, high-availability environments (experience in highly regulated sectors like financial services or healthcare preferred)
- Bachelor's degree from an accredited college or university is preferred; minimum of a high school diploma or GED is required; advanced technical certifications are strongly preferred, such as F5-CSE, F5-CTP, F5-CA, CISSP, CCNP Enterprise, or CCIE Enterprise Infrastructure
- Expert-level mastery across the F5 ecosystem, including BIG-IP (LTM, DNS/GTM, APM, ASM/AWAF, AFM), BIG-IQ, next-gen hardware architectures (VELOS, rSeries, iSeries, VIPRION), and F5OS
- Comprehensive expertise in core networking protocols and enterprise security architectures, including BGP, TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, routing & switching, as well as implementing Zero Trust frameworks and enterprise WAF/DDoS mitigation
- Demonstrated hands-on proficiency in network automation and modern provisioning workflows using Python, Ansible, Terraform, Git, REST APIs, and Infrastructure-as-Code (IaC) practices, with familiarity in Kubernetes ingress/service mesh or multi-cloud networking
- Proven track record in strategic technology planning, high-stakes problem resolution, architecture documentation, risk mitigation, and executive-level cross-functional communication to lead major migrations and mentor engineering teams
- Applicants must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future; KPMG LLP will not sponsor applicants for U.S. work visa status for this opportunity (no sponsorship is available for H-1B, L-1, TN, O-1, E-3, H-1B1,