Remote Zero Trust ICAM Engineer (Mid Level)

CELESTIAL INNOVATIONS GROUP LLC; Washington (District of Columbia); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

401(k)

Competitive salary

Dental insurance

Health insurance

Opportunity for advancement

Paid time off

Training & development

Vision insurance

Job summary

Celestial Innovations Group (CIG) seeks a Zero Trust Identity and ICAM Engineer to own end-to-end access policy design across identity, endpoint, network and applications for federal agency clients, guiding ZTA programs per EO 14028 and NIST SP 800-207. The role combines architecture, implementation and sustainment, with onsite work in the DC metro area and remote support as needed.

You will lead assessments, document ZTA solutions, and integrate Entra ID, Intune, SCCM, Purview, and Palo

Qualifications

• 5+ years in cybersecurity, network security, or IT infrastructure roles.
• 2+ years designing or implementing Zero Trust Architecture in federal environments.
• Understanding of ZTA across five pillars per NIST SP 800-207.
• Experience with federal government or DoD environments.

Responsibilities

• Lead Zero Trust Architecture assessments, gap analyses, and roadmaps for federal clients.
• Design ZTA solutions spanning Identity, Device, Network, Application/Workload, and Data pillars.
• Translate mandates into actionable implementation plans (EO 14028, NIST SP 800-207).
• Develop ZTA documentation using frameworks like DODAF or TOGAF.
• Support integration of ZTA into existing architectures and hybrid cloud environments.
• Drive SASE convergence and policy-plane unification.
• Advance insider threat detection and response capabilities.

Skills

Zero Trust

ZTA concepts

Federally compliant

Access policy design

Tools

Palo Alto Prisma

Zscaler

Microsoft Entra ID

Intune

SCCM

Workspace ONE

Purview

Qualys

Job description

Celestial Innovations Group (CIG) seeks a Zero Trust Identity and ICAM Engineer to own end-to-end access policy design across identity, endpoint, network and applications for federal agency clients, guiding ZTA programs per EO 14028 and NIST SP 800-207. The role combines architecture, implementation and sustainment, with onsite work in the DC metro area and remote support as needed.

You will lead assessments, document ZTA solutions, and integrate Entra ID, Intune, SCCM, Purview, and Palo