AppGate Cybersecurity, Inc.

Role Description As an AppGate ZTNA subject matter expert, the Solution Architect (SA) owns the technical engagement and is responsible for designing, deploying, and articulating a solution that fully realizes the customer’s requirements. - Conducts technology whiteboard sessions, solution design, and configurations. - Executes proofs of concept (POCs) and customer evaluations. - Collaborates with internal AppGate Business Units including Professional Services, Customer Success, Support, R&D, and Sales teams. - Proposes and implements complex AppGate ZTNA-integrated solutions for customers. - Works with Product and R&D Teams to prioritize and define feature enhancements based on customer needs. - Creates, designs, and documents all proposed architectures derived from customer communications and POC work. - Acts as the primary technical escalation for post-sale delivery teams during deployments. - Supports expansion and retention efforts with the Customer Success Manager (CSM). - Acts as an escalation point for the CSM and support teams to troubleshoot break/fix issues. Qualifications - 5-15 years of experience as a Pre-Sales Solution Architect within the Cybersecurity or Networking space. - 5-15 years of experience delivering software/network solutions in the Cybersecurity or Networking space. - Communicates effectively with security, network, and IT operations stakeholders. - Familiarity with Zero Trust Network concepts and Software Defined Perimeter (desired). - Familiarity with Single Packet Authorization (desired). - Familiarity with Identity Platforms, Endpoint Security tools, Compliance and UEBA, SIEM, SOAR, and ITSM. - Demonstrate Architect level knowledge and experience designing, articulating, and implementing connectivity solutions to public cloud services such as AWS, Microsoft Azure, GCP, OCI, and IBM Cloud. - Demonstrate Architect level knowledge and experience designing, articulating, and implementing complex Network integrations and Cybersecurity solutions. - Familiarity with common virtualization technologies such as VMware vSphere, Microsoft Hyper-V, Citrix Xen, and Red Hat OpenStack. - Familiarity with integration of access solutions with IDP (e.g., MS AD, OAuth 2.0, OIDC, LDAP, SAML, Radius) and MFA technology (e.g., TOTP, FIDO, Radius). - Familiarity with systems integration and workflow automation using REST API, JavaScript, JSON. - Build and troubleshoot REST API integrations with external systems, including Microsoft Graph API, Service Desk REST APIs. - Direct experience with scripting, including RESTful APIs and JavaScript (desired). - Design and implement Infrastructure as Code (IaC) using Terraform and Ansible. - Implement Configuration as Code (CaC) and GitOps workflows. - Integrate Zero Trust deployments into CI/CD pipelines aligned with DevSecOps standards. - Ensure all automations are Version-Controlled, Repeatable, Auditable, API-Driven. - Familiarity with process frameworks such as MOF, ITIL or ITSM. - Architect level familiarity with network security solutions such as firewalls/next generation firewalls, network access control and VPNs. - Familiarity and experience architecting and deploying network systems using the OSI model for Networking. - Current CCNA, CCNP, CCIE, or equivalent networking certification or experience required. - Architect level familiarity with IP routing, VPN systems, Encryption using TLS/dTLS/mTLS, SSH, Certificate Signing and Authentication. - Holder of current valid certificate of competency from a major public cloud provider (e.g., AWS Certified Solutions Architect – Associate). - Familiarity with authentication protocols & services such as Active Directory, LDAP, Radius, Kerberos, SAML, SSL. - Familiarity with encryption standards such as AES, PKI, RSA. - Experience with compliance engineering in support of frameworks such as SOC 2, ISO 27001, NIST CSF, and PCI-DSS. Requirements - Travel: 25% Company Description AppGate secures and protects an organization's most valuable assets with its high performance Zero Trust Network Access (ZTNA) solution. AppGate is the only direct-routed ZTNA solution built for peak performance, superior protection and seamless interoperability. AppGate safeguards Fortune 500 enterprises worldwide. Learn more at appgate.com.

Role Description This is a senior, principal-level pre-sales role leading the technical engagement across AppGate’s federal civilian accounts. You will work directly with agency stakeholders to understand their requirements and design Zero Trust solutions that fit their mission, security and compliance needs. Much of that work means aligning AppGate to the frameworks agencies are measured against, such as the CISA Zero Trust Maturity Model (ZTMM), TIC 3.0, Continuous Diagnostics and Mitigation (CDM), OMB M-22-09 and FedRAMP. The role is built as a path to a Field CTO position for the federal civilian business. Day to day, the work spans: - Whiteboard sessions - Solution design and configuration - Proofs of concept - Customer presentations You will act as a trusted advisor to agency CIOs, CISOs and program leaders, and partner closely with AppGate’s sales, product and engineering teams along with systems integrators and channel partners to design and deliver solutions built on AppGate ZTNA. Clear communication and the ability to translate technical detail for both engineers and executives are essential. Qualifications - Knowledge of the mandates and frameworks agencies are measured against, including the CISA Zero Trust Maturity Model, TIC 3.0, CDM, OMB M-22-09, Executive Order 14028, FISMA and NIST SP 800-207 and 800-53. - Familiarity with federal procurement vehicles and bid processes, such as GSA Multiple Award Schedule, NASA SEWP, NITAAC CIO-SP3 and CIO-SP4 and CDM DEFEND. - Understanding of FedRAMP authorization, High Value Asset protection and the EINSTEIN national cybersecurity program. - Hands-on experience designing, deploying or selling solutions on major public cloud platforms such as AWS, Microsoft Azure, Google Cloud and IBM Cloud. - Network security experience across firewalls, next-generation firewalls, network access control and VPNs, including the move from legacy VPN to ZTNA and SASE. - Authentication and identity, including Active Directory, LDAP, RADIUS, Kerberos and SAML, along with federal identity standards such as PIV cards, derived credentials and ICAM. - Encryption standards such as AES, PKI and RSA, including FIPS 140-2 and 140-3 validated cryptography. - Common virtualization platforms such as VMware vSphere, Microsoft Hyper-V, Citrix and Red Hat. - Scripting experience, including RESTful APIs and JavaScript. - Familiarity with IT service management frameworks such as ITIL or ITSM. - Ten or more years in pre-sales engineering or solutions architecture, with significant time supporting federal civilian customers. - Strong written and verbal communication skills, and the ability to build rapport with both engineers and executives. - Proficiency with Salesforce or a similar CRM and with Microsoft Office, including Word, Excel, PowerPoint, Outlook and Visio. - A bachelor’s degree in engineering, information technology or a related field, or equivalent experience. - CCNA, CCIE or an equivalent certification is a plus. Requirements - Ability to obtain and maintain a federal Public Trust or Secret clearance, including agency suitability requirements such as DHS Entrance on Duty. - Direct experience with one or more target agencies, such as the IRS, Treasury, the State Department, CBP or FEMA. - Broader experience across the Department of Homeland Security, including CISA, TSA, USCIS, ICE, the Coast Guard or the Secret Service. - Experience with HHS and its agencies (CMS, NIH, CDC and FDA), the VA, or large departments such as Agriculture, Interior, Energy, Transportation or Commerce. - State, local and education (SLED) experience is a plus, including StateRAMP, the CJIS Security Policy, MS-ISAC, whole-of-state strategies and the State and Local Cybersecurity Grant Program. - Existing relationships with agency technical decision-makers and with systems integrators and channel partners. - Relevant certifications, such as CISSP, an AWS or Azure cloud credential, or a recognized Zero Trust certification. - A track record of thought leadership, such as conference speaking, published technical content or standards work. Benefits - Base salary range: 200-250K - Bonus / commission: 50% variable - 50% travel

Role Description The Regional Sales Director will be responsible for the sales execution of the region's short- and long-term pipeline. This will include new prospect identification, engagement of ‘C Suite’ executives, and development of existing executive relationships to further revenue opportunities. The Sales Director will work closely with sister sales organizations, the executive team, strategic alliances, and marketing and Regional Sales Leaders to build and execute a global sales strategy that takes advantage of industry and regional trends leading to long-term revenue impact. This role is chartered with driving a cohesive sales strategy within a geo-sector and building a more robust vision, strategy, and business processes needed for success. - Responsible for the creation and execution of a short and long-term sales pipeline to capture new and existing opportunities within the region - NOLA y CCA. - Review and analyze market opportunities and evaluate competitive and technology requirements needed to capitalize on opportunities. - Understand current and future industry needs in market dynamics to deliver multiyear business deals. - Manage relationships and communications with external customers, internal stakeholders, and partners required for a successful deal. - Shape and execute global business development and sales strategy across senior-level direct and matrixed cross-functional teams. - Align sales objectives to the corporate strategy and financial performance measures. - Develop technology requirements and opportunities for internal product and marketing teams. - Identify relevant new business opportunities, ecosystems, partnerships, and markets; gather market intelligence and design and drive "go-to-market" plans. - Uncover and qualify opportunities that will accelerate and drive growth within the geography. Qualifications - 5-10 years of Cybersecurity industry experience in a sales role, preferably with deep expertise in Networking Security. - Must be high energy, aggressive, and driven to expand capabilities in a small, growing company. - Requires strong existing relationships with Network teams or CISO Organizations. - Ability to manage the complex sale with multiple stakeholders and consensus-based decisions. - Ability to drive customers to adopt new ways of doing things. - Must have a track record of managing a territory, including prospecting, leveraging partners (CTL, Optiv, etc.), closing new logos, and expanding customers based on land/expand sales strategy. Benefits - Health Insurance for the employee and family. - Fitness Stipend.

Role Description The Federal Security Officer (FSO) is AppGate's primary point of accountability for industrial security across our programs. You will manage personnel security, facility clearance (FCL) compliance, classified information handling, and security education — ensuring AppGate meets all contractual and regulatory obligations while supporting a fast-moving software engineering and delivery organization. Key Responsibilities - Personnel Security - Own the full lifecycle of personnel security clearances — initiations, sponsorships, reinvestigations, and terminations — using DISS/NBIS. - Serve as the primary liaison with DCSA (Defense Counterintelligence and Security Agency) and other cognizant security authorities. - Conduct security briefings, debriefings, foreign travel briefings, and annual security awareness training for cleared staff. - Maintain accurate records of cleared employees, visitor certifications, and foreign national contacts. - Facility Clearance & Physical Security - Manage and maintain AppGate's Facility Clearance (FCL) in accordance with DCSA guidance and NISPOM (32 CFR Part 117). - Oversee physical security controls including access management, classified storage, open storage areas, and classified destruction procedures. - Conduct and document periodic self-inspections; develop and track corrective action plans. - Manage classified visit certifications and coordinate cleared personnel access to government and contractor facilities. - Information Security & Program Support - Ensure proper handling, transmission, storage, and disposition of classified information and Controlled Unclassified Information (CUI). - Support program managers in reviewing DD Form 254s (Contract Security Classification Specifications) for new and existing contracts. - Partner with AppGate's IT and DevSecOps teams to ensure classified and sensitive program environments meet applicable security requirements. - Interface with government Program Security Officers (PSOs) on program-specific security requirements and deliverables. - Compliance, Policy & Incident Management - Maintain compliance with NISPOM, ITAR, EAR, and relevant federal security directives across all cleared programs. - Develop and enforce security policies, procedures, and SOPs tailored to a software product company environment. - Investigate and report security incidents and violations to DCSA and appropriate authorities; drive root cause analysis and remediation. - Support CMMC assessments, government inspections, and contract-driven security audits. - Stay current on evolving federal security regulations and proactively update AppGate's security program accordingly. Qualifications - Active Secret clearance; TS or TS/SCI strongly preferred. - 5+ years of industrial security / FSO experience with a cleared defense contractor or government entity. - Deep working knowledge of NISPOM (32 CFR Part 117) and DCSA processes. - Hands-on experience with DISS, NBIS, or equivalent personnel security systems. - Experience managing an FCL and conducting DCSA self-inspections. - FSO Certification through DCSA's Center for Development of Security Excellence (CDSE) or equivalent. - Excellent communication skills — able to translate complex security requirements for non-security audiences including software engineers and executives. - Bachelor's degree in security management, information assurance, cybersecurity, or a related field — or equivalent professional experience. Preferred Qualifications - Prior FSO or security management experience at a software, SaaS, or cybersecurity company. - Familiarity with CMMC (Cybersecurity Maturity Model Certification) Level 2/3 requirements and C3PAO assessment processes. - Understanding of cloud security environments (AWS GovCloud, Azure Government) in the context of classified or CUI-handling programs. - Experience with ITAR/EAR export control compliance, including technology control plans (TCPs). - OPSEC Coordinator certification or Special Access Program (SAP) security experience. - Professional certifications: CPP (Certified Protection Professional), PSP, or SAPPC. - Familiarity with Zero Trust concepts and how they intersect with federal security program requirements — a plus given AppGate's mission. Compensation - Base salary range: 90-115k Company Description AppGate secures and protects the most valuable assets for the Department of War (DoW) and various Federal Agencies with its high performance Zero Trust Network Access (ZTNA) solution. AppGate is the only direct-routed ZTNA solution purpose-built to support DoW mission requirements by enforcing least privilege access across distributed, global, and disconnected environments. AppGate is fully operational across many DOD branches, including the Marine Corps, Navy, Air Force and Space Force.

Role Description We are seeking an accomplished sales leader to lead and scale our Zero Trust Network Access business across Latin America, South America, and the Caribbean. Reporting to the SVP, Global Sales, the Director of LATAM Sales will be responsible for building a high-performing, multi-country go-to-market organization spanning direct enterprise sales, channel and distribution partners while collaborating with sales engineering, regional marketing, delivery, and customer success. This is a builder role for a leader who has scaled network security, cybersecurity, or adjacent infrastructure businesses from early traction to durable, predictable growth across the region. The successful candidate will combine deep enterprise-selling instincts with the operational discipline to forecast accurately, manage a complex partner ecosystem, and deliver on aggressive quota commitments. Qualifications - 15+ years of enterprise software or infrastructure sales experience, with at least 5 years in sales leadership roles. - Demonstrated track record of building and scaling a multi-country LATAM sales business in network security, cybersecurity, networking, or adjacent enterprise infrastructure categories. - Direct experience carrying and consistently exceeding regional quotas, with documented year-over-year growth. - Proven ability to build and operate both direct enterprise sales motions and high-leverage channel ecosystems in parallel, without channel conflict. - Experience selling to and managing relationships with CISOs and senior security buyers in financial services, telecommunications, government, energy, and large enterprise verticals. - Fluent in English and Spanish (Portuguese a significant plus) — able to lead executive conversations, board-level presentations, and customer negotiations in all three languages. - Deep working knowledge of the LATAM and Caribbean commercial landscape, including country-level go-to-market nuances, regulatory environments, and distribution structures. - Operational fluency in modern sales tooling and methodology — CRM hygiene, forecasting discipline, MEDDPICC frameworks, and data-driven pipeline management. - Bachelor's degree required; MBA or equivalent advanced degree preferred. - Willingness to travel up to 50% across the region, including periodic travel to global headquarters. Requirements - Own the annual revenue plan, new-logo ACV and expansion ACV targets for the LATAM region. - Build and maintain a rigorous forecasting cadence — weekly commits, monthly QBRs, quarterly executive-grade pipeline reviews — with accuracy held to a tight tolerance. - Drive pipeline coverage of 6x quota across all stages, with healthy distribution by country, segment, and partner type. - Manage the regional sales budget, headcount plan, and operating expenses to deliver target contribution margin. - Partner with Finance, Legal and Revenue Operations to structure complex, multi-country commercial agreements. - Lead the direct sales organization covering large enterprise, manufacturing, telecommunications, government, critical infrastructure, and financial services accounts. - Personally engage at the C-suite and CISO level in the region's top strategic accounts to drive enterprise-wide adoption. - Establish and enforce a disciplined MEDDPICC sales methodology — qualification, opportunity management, executive briefings, and proof-of-value programs. - Recruit, develop, and retain top-tier enterprise sellers in priority countries. - Build account-based motions for the region's named strategic accounts in partnership with Marketing and Sales Engineering. - Design and execute the regional channel strategy across distributors, resellers, MSSPs, system integrators, and technology alliance partners. - Recruit, certify, and activate net-new partners while deepening engagement with existing strategic partners to drive partner-sourced and partner-influenced revenue. - Own quarterly executive partner reviews and ensure partner-sourced revenue grows as a percentage of total regional revenue. - Guide regional Sales Engineering team — technical pre-sales, proof-of-concept execution, and competitive displacement. - Guide regional Marketing investment across demand generation, field marketing, events, and partner co-marketing to fill the top of the funnel. - Collaborate with Customer Success and post-sale account management to drive gross and net revenue retention across the installed base. - Coordinate with Product, Marketing, Engineering, and Delivery & Support to ensure regional customer needs — language, localization, regulatory, and integration — are represented in the roadmap. - Serve as the senior executive sponsor for the region's most strategic customers and partners. - Represent the company at industry events, customer councils, analyst briefings, and press engagements across the region. - Build and maintain executive relationships with CISOs, CIOs, and CTOs at the region's largest enterprises and government entities. - Provide informed market intelligence — competitive landscape, regulatory shifts, and macroeconomic factors — back to the executive team. Benefits - Health insurance packet for the employee and family - Mobile Phone Stipend - Fitness stipend - Training and certification - Award Units

Role Description We are looking for a highly curious and proactive L1 Analyst to join our GFC operations team. In this role, you will take on the first line of defense with an analytical approach, handling the investigation and mitigation of cybersecurity events for our clients. We value curiosity above all. We are looking for someone who doesn’t just see an alert and pass it on, but who asks "why?", digs deeper into data, investigates anomalies, and actively proposes new ideas and tools to improve our processes. Qualifications - Education: Student or Graduate in Systems Engineering, Telecommunications, Electronics, Mechatronics, or similar. - Experience: At least 1 year of experience in operations environments (SOC, Help Desk, or similar roles). - Technical Knowledge: - Solid understanding of Windows and Linux Operating Systems. - Basic knowledge of HTML and web fundamentals. - Language: Intermediate English level (B1+ or B2, spoken and written). - Soft Skills (The Core of our Team): - Natural Curiosity: A passion for investigative work, asking the right questions, and going beyond the surface of an alert. - Innovation & Proactivity: Innovation is part of our organizational values; we want someone who brings ideas. - Effective communication, problem-solving skills, and adaptability to change. Requirements - First Responder: Act as the initial point of contact for security events received via tickets, email, and telephone, ensuring elite communication with clients. - Proactive Threat analysis & Monitoring: Perform continuous monitoring, proactive searches, threat analysis, and vulnerability assessments using both documented procedures and your own investigative instinct. - Incident Response & Escalation: Solve technical problems independently. When necessary, accurately escalate complex issues to Level 2 analysts and Team Leaders. - Continuous Improvement: Actively participate and propose ideas in investigations focused on key information gathering. Explore and test new monitoring and remediation tools. - Documentation & Best Practices: Meticulously document all actions taken within incident management. Recommend improvements to GFC processes, procedures, and security policies of the area. - Team Collaboration: Collaborate with local team members, external staff, and participate in the training of junior analysts and interns. Benefits - Extensive Health Insurance Coverage for the Employee and Their Family - Fitness Allowance - Remote Work Stipend - Access to an E-Learning Platform

Role Description We are looking for a Forward Deployed Engineer (FDE) to work directly with customers to design, implement, and operationalize technical solutions that solve high-impact business and security challenges. This role combines software engineering, systems integration, customer engagement, and solution architecture. As an FDE, you will operate at the intersection of engineering, product, and customer success. You will work closely with enterprise customers to understand their environments, deploy and customize solutions, integrate with complex infrastructures, and help shape product direction based on real-world feedback. This is a highly cross-functional role ideal for engineers who enjoy solving ambiguous problems, working directly with customers, and delivering measurable outcomes in fast-moving environments. Key Responsibilities - Customer-Facing Engineering - Partner directly with customers to understand technical requirements, workflows, and operational objectives. - Design and implement tailored technical solutions in customer environments. - Lead deployments, integrations, proof-of-concepts, and production rollouts. - Troubleshoot complex technical issues across infrastructure, networking, identity, APIs, and cloud platforms. - Translate customer challenges into scalable technical solutions. - Solution Development & Integration - Build scripts, automation, integrations, and lightweight applications to extend platform capabilities. - Develop APIs, connectors, and workflow automations. - Integrate with enterprise systems such as IAM, SIEM, endpoint management, cloud providers, and DevOps tooling. - Contribute reusable deployment patterns, templates, and tooling. - Cross-Functional Collaboration - Work closely with Product, Engineering, Sales Engineering, Customer Success, and Support teams. - Provide product feedback based on customer needs and field experience. - Influence roadmap priorities through direct customer insights. - Document implementation best practices and operational runbooks. - Technical Leadership - Serve as a trusted technical advisor to customers. - Lead technical workshops, architecture reviews, and onboarding sessions. - Mentor customers and internal teams on deployment best practices. - Drive operational excellence and long-term customer success. Qualifications - Bachelor’s degree in Computer Science, Engineering, Information Technology, or equivalent practical experience. - 3+ years of experience in software engineering, solutions engineering, systems engineering, DevOps, or related technical roles. - Strong experience with APIs, scripting, and automation. - Experience with cloud platforms such as AWS, Azure, or Google Cloud. - Strong understanding of networking, authentication, and enterprise infrastructure. - Experience troubleshooting distributed systems and production environments. - Ability to communicate technical concepts clearly to both technical and non-technical stakeholders. - Strong problem-solving skills and ability to work independently in ambiguous environments. - Willingness to travel occasionally to customer sites if required. Preferred Qualifications - Experience working in customer-facing technical roles. - Experience with cybersecurity, zero trust, identity, or access management platforms. - Familiarity with Kubernetes, Docker, Terraform, or infrastructure-as-code. - Experience with Python, Go, JavaScript, or similar programming languages. - Knowledge of enterprise security architectures and compliance frameworks. - Experience working in fast-paced startup or high-growth environments. Technical Skills - Preferred experience in several of the following areas: - REST APIs and API integrations - Python, Bash, Go, or JavaScript - Linux administration - Networking protocols and troubleshooting - SSO, SAML, OAuth, OpenID Connect - Cloud infrastructure and automation - CI/CD pipelines - Kubernetes and container orchestration - Infrastructure-as-Code tools - Logging, monitoring, and observability platforms - Security and identity platforms Compensation 180K - 215K Company Description AppGate is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. In furtherance of AppGate's policy regarding affirmative action and equal employment opportunity, AppGate has developed a written affirmative action program. This program is available for review upon request by any applicant or employee during normal business hours by contacting the company's EEO Coordinator.

Role Description We are looking for a Forward Deployed Engineer (FDE) to work directly with customers to design, implement, and operationalize technical solutions that solve high-impact business and security challenges. This role combines software engineering, systems integration, customer engagement, and solution architecture. As an FDE, you will operate at the intersection of engineering, product, and customer success. You will work closely with enterprise customers to understand their environments, deploy and customize solutions, integrate with complex infrastructures, and help shape product direction based on real-world feedback. This is a highly cross-functional role ideal for engineers who enjoy solving ambiguous problems, working directly with customers, and delivering measurable outcomes in fast-moving environments. Key Responsibilities - Customer-Facing Engineering - Partner directly with customers to understand technical requirements, workflows, and operational objectives. - Design and implement tailored technical solutions in customer environments. - Lead deployments, integrations, proof-of-concepts, and production rollouts. - Troubleshoot complex technical issues across infrastructure, networking, identity, APIs, and cloud platforms. - Translate customer challenges into scalable technical solutions. - Solution Development & Integration - Build scripts, automation, integrations, and lightweight applications to extend platform capabilities. - Develop APIs, connectors, and workflow automations. - Integrate with enterprise systems such as IAM, SIEM, endpoint management, cloud providers, and DevOps tooling. - Contribute reusable deployment patterns, templates, and tooling. - Cross-Functional Collaboration - Work closely with Product, Engineering, Sales Engineering, Customer Success, and Support teams. - Provide product feedback based on customer needs and field experience. - Influence roadmap priorities through direct customer insights. - Document implementation best practices and operational runbooks. - Technical Leadership - Serve as a trusted technical advisor to customers. - Lead technical workshops, architecture reviews, and onboarding sessions. - Mentor customers and internal teams on deployment best practices. - Drive operational excellence and long-term customer success. Qualifications - Bachelor’s degree in Computer Science, Engineering, Information Technology, or equivalent practical experience. - 3+ years of experience in software engineering, solutions engineering, systems engineering, DevOps, or related technical roles. - Strong experience with APIs, scripting, and automation. - Experience with cloud platforms such as AWS, Azure, or Google Cloud. - Strong understanding of networking, authentication, and enterprise infrastructure. - Experience troubleshooting distributed systems and production environments. - Ability to communicate technical concepts clearly to both technical and non-technical stakeholders. - Strong problem-solving skills and ability to work independently in ambiguous environments. - Willingness to travel occasionally to customer sites if required. Preferred Qualifications - Experience working in customer-facing technical roles. - Experience with cybersecurity, zero trust, identity, or access management platforms. - Familiarity with Kubernetes, Docker, Terraform, or infrastructure-as-code. - Experience with Python, Go, JavaScript, or similar programming languages. - Knowledge of enterprise security architectures and compliance frameworks. - Experience working in fast-paced startup or high-growth environments. Technical Skills - Preferred experience in several of the following areas: - REST APIs and API integrations - Python, Bash, Go, or JavaScript - Linux administration - Networking protocols and troubleshooting - SSO, SAML, OAuth, OpenID Connect - Cloud infrastructure and automation - CI/CD pipelines - Kubernetes and container orchestration - Infrastructure-as-Code tools - Logging, monitoring, and observability platforms - Security and identity platforms Compensation 160K Annually What Success Looks Like - Customers successfully deploy and operationalize solutions quickly. - Technical integrations are reliable, scalable, and maintainable. - Customer feedback directly improves product capabilities. - Complex implementation challenges are resolved efficiently. - Strong relationships are built with customer technical stakeholders. Why Join Us - Work on high-impact technical problems with enterprise customers. - Collaborate with product and engineering teams to influence platform direction. - Operate in a highly technical and customer-centric environment. - Gain exposure to modern cloud, security, and infrastructure technologies. - Be part of a fast-moving team focused on innovation and customer success. Company Description AppGate is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. In furtherance of AppGate's policy regarding affirmative action and equal employment opportunity, AppGate has developed a written affirmative action program. This program is available for review upon request by any applicant or employee during normal business hours by contacting the company's EEO Coordinator.

Role Description We're looking for a AI/ML Engineer (Senior/Staff/Principal) - Threat Detection who will design, build, and operationalize the detection algorithms, ML inference pipelines, and risk aggregation systems that power our autonomous threat detection platform. You'll work at the intersection of identity security, behavioral analytics, and applied machine learning — building production systems that analyze ZTNA audit logs in near real-time, surface high-fidelity threat signals, and feed into our Risk Sentinel enforcement engine to continuously harden access decisions. Key Responsibilities - Your engineering work will directly enable next-generation capabilities, including: - Threat Detection Engine: Rule-based, behavioral, and ML-based detections across identity, access, network, and session domains — including brute force, privilege escalation, impossible travel, data exfiltration, and off-hours activity. - ML Anomaly Detection: Production models using Isolation Forest, One-Class SVM, and Autoencoder neural networks to surface behavioral outliers that rules miss. - Risk Aggregation & Enforcement: Normalize and weight detection signals into user and device risk scores; integrate with the AppGate Risk Sentinel engine to drive continuous access decisions. - Real-Time Detection Pipeline: Near real-time streaming architecture ingesting ZTNA audit logs, with stateless detection outputs feeding incrementally updated risk scores. - AI Agent Security: Detect drift, unexpected resource escalation, and signs of compromise or misconfiguration in autonomous AI agents operating within the ZTNA environment. - Autonomous Remediation (Roadmap): Build the enforcement feedback loop enabling the Risk Sentinel to auto-remediate high-confidence threats and support AI-assisted investigation. - Design and implement detection algorithms spanning authentication, authorization, network/location, data access, session management, and temporal behavioral domains. - Train, evaluate, and deploy ML models on real-world identity and network telemetry; tune for production precision and recall targets. - Architect and operate the detection pipeline — from audit log ingestion through risk aggregation and Risk Sentinel integration. - Define the detection taxonomy — categorizing, prioritizing, and lifecycle-managing the full detection library using a scalable detection family model. - Instrument and improve signal quality — measuring MTTD, false positive rates, and MITRE ATT&CK coverage; partnering with red teams to validate detections against real attack scenarios. - Collaborate cross-functionally with security, product, and platform engineering to align detection coverage with customer threat models and roadmap priorities. Qualifications - 7+ years of production AI/ML engineering experience, with a strong preference for candidates who have built threat detection, UEBA, ITDR, or identity security platforms at leading security or cloud companies. - Detection algorithm expertise: Hands-on experience designing detections for identity-based threats — credential compromise, privilege escalation, insider activity, behavioral anomalies, and data exfiltration. - ML proficiency: Anomaly detection (Isolation Forest, One-Class SVM, Autoencoders), statistical methods, and supervised classification using PyTorch or TensorFlow. - Data & streaming engineering: Real-time or near-real-time pipeline experience (Kafka, Flink, Spark Streaming, or equivalent); familiarity with lakehouse formats (Apache Iceberg, Parquet). - Security domain knowledge: MITRE ATT&CK, identity threat kill chains, ZTNA or network access control systems, and audit log analysis. - Bonus: Experience with detection-as-code frameworks (Sigma, YARA), ZTNA platforms, LLMs or GNNs applied to security, or publications at USENIX, CCS, NeurIPS, or ICML. - Mindset: Mission-driven, production-focused, signal-obsessed. You measure precision and recall, you eliminate alert fatigue, and you care that your work protects real systems. Company Description AppGate secures and protects an organization's most valuable assets with its high performance Zero Trust Network Access (ZTNA) solution. AppGate is the only direct-routed ZTNA solution built for peak performance, superior protection and seamless interoperability. AppGate safeguards Fortune 500 enterprises worldwide. Learn more at appgate.com.

Role Description We’re looking for an Observability Engineer (Senior/Staff/Principal level) who has shipped distributed tracing systems, designed high-cardinality pipelines, and knows OpenTelemetry inside and out. You will own the end-to-end design and implementation of the AppGate observability fabric — from telemetry SDKs in our clients and gateways, to the LogForwarder pipeline, to customer-side integrations. You’ll make the foundational technical decisions — transport protocols, sampling strategies, schema design, correlation models — that determine whether our platform scales gracefully to hundreds of millions of events per day. This is a builder’s role with a strategist’s reach. Key Responsibilities - OpenTelemetry-Native Telemetry Fabric: Logs and distributed traces from clients, controllers, gateways, and connectors — all correlated by session, user, device, and trace ID across the full ZTNA flow. - High-Cardinality Data Pipeline: An OTLP-based ingestion and routing layer engineered for 100M+ events per day, with attribute filtering, redaction, and tail-sampling. - End-to-End Distributed Tracing: Span hierarchies decomposing login and session establishment across posture checks, policy decisions, TLS handshakes, and entitlement resolution — turning hours of triage into seconds. - On-Demand Packet Capture: Admin-triggered PCAP coordinated across client and gateway, with the workflow fully observable through OTel logs and traces. - AI-Ready Foundation: Structured, semantically rich telemetry that future LLM-based incident analysis agents can reason over. The schema you design today is the substrate for Phase 3. - Architect the Observability Platform: Define telemetry schema, correlation model, transport, and sampling strategies spanning client devices, controllers, and gateways. - Build the Telemetry SDKs and LogForwarder: Instrument AppGate components with OpenTelemetry and implement the enrichment, redaction, batching, and tail-sampling pipeline that scales horizontally under load. - Validate at Customer Scale: Test in lab environments matching our largest deployments — hundreds of sites, tens of thousands of concurrent sessions — and hunt down cardinality explosions and pipeline backpressure before customers see them. - Drive Integration Standards: Own the OTLP, Prometheus, and JSON-log compatibility surface and validate ingestion into Datadog, Splunk, Nexthink, and Elastic. - Raise the Engineering Bar: Establish patterns and review practices the Data + AI team builds on. Mentor engineers and grow the observability discipline inside AppGate. - Collaborate Cross-Functionally: Work directly with product, R&D, and marquee customers in defense and critical infrastructure to shape requirements and deliver outcomes that matter. Qualifications - 8+ years of engineering experience with at least 4 years dedicated to observability, telemetry, or large-scale data infrastructure (Datadog, Splunk, Elastic, Honeycomb, New Relic, Grafana Labs, or equivalent). - Deep OpenTelemetry expertise: OTLP, the OTel Collector, semantic conventions, context propagation, and head/tail sampling — you can debate the trade-offs in your sleep. - Distributed tracing in production: You’ve designed or significantly contributed to a tracing system handling real customer traffic, not just a side project. - High-throughput pipeline experience: Hands-on with systems ingesting 100M+ events per day, including back-pressure handling, batching, and storage trade-offs. - Strong systems programming: Production Go and/or Rust preferred. Comfort across the stack, from agent code to backend services. - Networking and security fluency: Comfortable with TLS, DNS, TCP, and identity protocols. Prior ZTNA, SASE, or SD-WAN experience is a strong plus. - Mindset: Pragmatic, opinionated, and impact driven. You know when to prototype and when to ship. Our Observability Vision AppGate secures defense agencies, federal governments, and Fortune 100 enterprises. When a connection traverses our ZTNA fabric — across clients, gateways, controllers, and protected resources — every hop carries real consequences for national security and business continuity. Yet when something breaks, the answer to “Why can’t I reach this resource?” is still buried in fragmented logs and tribal knowledge. That ends now. We are building Observability AI — a purpose-built observability platform for the Zero Trust era. It emits high-fidelity, correlated telemetry across every AppGate component, is OpenTelemetry-native, engineered for 100M+ events per day, and designed to stream into Datadog, Splunk, Nexthink, Elastic, or any OTLP-compatible backend. The roadmap runs from a raw data-feed MVP, through native analytics and root-cause dashboards, to AI-driven incident analysis — LLM agents that read traces and explain failures in AppGate terms — and ultimately to autonomous remediation. This is the nervous system for networks that protect nations. This is your chance to build the observability platform for networks that protect nations. If you’ve shipped observability at scale and want to apply that craft where the stakes are highest, we want to hear from you. Company Description AppGate is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class. In furtherance of AppGate's policy regarding affirmative action and equal employment opportunity, AppGate has developed a written affirmative action program. This program is available for review upon request by any applicant or employee during normal business hours by contacting the company's EEO Coordinator.