Hybrid Cloud & Network Security Architect - Zero Trust

eTelligent Group LLC; Bethesda (MD); Hybrid; USD 130,000 - 140,000; Full time

Job summary

eTelligent Group LLC in Bethesda, MD seeks a design-focused security engineer to co-author cloud, on-prem, and hybrid reference architectures for NIH Zero Trust Architecture projects. You will map controls, craft microsegmentation patterns, and define policy anchors for security and telemetry.

You will work with IC teams and labs, contributing deep engineering expertise while producing reusable reference designs and documentation for NIH governance.

Qualifications

• Bachelor's degree plus 7+ years of network and/or cloud security engineering.
• Hands-on experience with identity-aware access, microsegmentation, and cloud security patterns in enterprise environments.
• Experience with firewalls, SSE/ZTNA, and native AWS or Azure security services.
• Security+ or a higher security certification.
• Ability to obtain an NIH suitability determination and PIV credential; fluent in English.

Responsibilities

• Co-author the cloud, on-premises, and hybrid reference architectures (Subtask 2.2) with the Senior ZT Architect, as reusable design patterns with NIST SP 800-53 Rev 5 control mappings.
• Design microsegmentation and workload-identity patterns (NIST SP 800-207A, CISA and NSA Zero Trust guidance), software-defined perimeter for HPC clusters, and isolated VLANs with brokered remote access for laboratory instruments.
• Document how centrally provided network, endpoint, and logging services are inherited, as input to the Centrally Provided Services Matrix.
• Define technical policy anchors for the network and device pillars (segmentation policy in the controller, compliance policy in endpoint management). Map controls to telemetry so continuous-monitoring evidence is collected rather than written by hand.
• Support Task 3 network use cases: flow baselining to generate and validate microsegmentation policy, and lateral-movement anomaly detection.
• Support the Task 4 gap assessment for the network, device, and cloud pillars, and the evidence expectations in the ZTA Overlay.
• Validate patterns with IC engineering teams (CIT, HPC, and clinical platform owners).

Skills

Identity-aware access

Microsegmentation

Cloud security patterns

Firewalls / SSE(ZTNA)

English fluency

Education

Bachelor's degree

Tools

Terraform

CloudFormation

Job description

eTelligent Group LLC in Bethesda, MD seeks a design-focused security engineer to co-author cloud, on-prem, and hybrid reference architectures for NIH Zero Trust Architecture projects. You will map controls, craft microsegmentation patterns, and define policy anchors for security and telemetry.

You will work with IC teams and labs, contributing deep engineering expertise while producing reusable reference designs and documentation for NIH governance.