Hybrid Cloud Zero-Trust Security Architect Lead

gdit; Martinsburg (WV); Hybrid; USD 115,000 - 155,000; Full time

Job summary

GDIT is seeking a Cloud Network Security Architecture Manager to lead TIC 3.0‑aligned, Zero‑Trust‑enabled security architectures across VAs hybrid and multi‑cloud environments in Martinsburg/Austin. You will transform legacy perimeter models into trust zones, PEP‑based enforcement, and cloud‑native controls with continuous monitoring.

You will design and manage trust zones, guide PEP implementations, and integrate with SIEM pipelines while mentoring engineers and coordinating with multiple

Qualifications

• Bachelors degree or equivalent experience.
• Hands-on design or support of federal-grade Zero-Trust architectures.
• Experience with TIC 3.0 concepts, trust zones, distributed enforcement.
• Background in cloud, network, or security architecture (AWS, Azure, hybrid networking).
• Hands-on familiarity with firewalls, cloud gateways, DNS, IAM, API security, logging pipelines, and SIEM integrations.
• Strong knowledge of NIST CSF, NIST SP 800-207 (ZTA), NIST SP 800-53.
• Experience with automation, scripting, or IaC (Terraform, Ansible, CloudFormation, ARM templates).
• Effective communicator able to coordinate across multiple teams.
• Ability to support emergency incidents, escalations, and critical events.

Responsibilities

• Lead TIC 3.0 modernization, shifting security to distributed trust zones and PEP-based enforcement.
• Architect Zero-Trust, identity-centric controls, segmentation, and dynamic policy enforcement.
• Design and manage trust-zone mappings, cloud boundary protections, and secure interconnects.
• Guide implementation of policy enforcement points across cloud, on-prem, remote, and mobile use cases.
• Integrate solutions with CDM, EINSTEIN, SIEM platforms, and continuous monitoring pipelines.
• Partner with engineering, cyber, SOC, network, and operations teams to embed security.
• Oversee gateway transformation, including redesign and modernization aligned with TIC 3.0.
• Communicate architectural decisions, risks, and modernization strategies to VA leadership.
• Evaluate emerging technologies and lead pilots and PoCs for adoption strategies.
• Support escalations and critical events involving cloud networks and identity systems.
• Produce architecture diagrams, trust-zone definitions, PEP mappings, and compliance artifacts.
• Mentor engineers and promote security best practices across teams.

Skills

Cloud Platform

IT Service Management (ITSM)

Network Architecture

Education

Bachelors degree or equivalent experience

Job description

GDIT is seeking a Cloud Network Security Architecture Manager to lead TIC 3.0‑aligned, Zero‑Trust‑enabled security architectures across VAs hybrid and multi‑cloud environments in Martinsburg/Austin. You will transform legacy perimeter models into trust zones, PEP‑based enforcement, and cloud‑native controls with continuous monitoring.

You will design and manage trust zones, guide PEP implementations, and integrate with SIEM pipelines while mentoring engineers and coordinating with multiple