Senior Zero Trust Architect for Government Security (ZTNA/SASE)

SOC LLC; Quantico (VA); On-site; USD 116,000 - 165,000; Full time

Job summary

SOC LLC in Quantico, VA, seeks a Senior Zero Trust Network Architect/Engineer (Contract to Hire) with an active Secret clearance and eligibility for TS/SCI upgrade. Onsite at least two days a week or as needed at Quantico, VA.

Lead the ZTNA/SASE program, define technical roadmaps, implement Palo Alto GlobalProtect and Versa SASE, and govern security policy templates for micro‑segmentation and threat prevention across cloud, hybrid, and on‑prem environments.

Qualifications

• Bachelor’s degree in cybersecurity or related field; master’s or equivalent with military service is acceptable.
• Minimum 10 years in network security engineering, enterprise architecture, and infrastructure security.
• 3–4 years architecting Zero Trust (NIST SP 800-207) and SASE in enterprise or federal environments.
• Deep Palo Alto Networks knowledge including Panorama and GlobalProtect deployments.
• Certification requirements (8140): e.g., CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, GDSA, GICSP.

Responsibilities

• Act as Principal Architect for the DCSA Zero Trust journey with roadmaps and reference architectures.
• Design and optimize Palo Alto GlobalProtect and Versa SASE for cloud and on‑prem endpoints.
• Define and govern security policy templates with Palo Alto Panorama for micro‑segmentation.
• Architect DLP, SSL/TLS decryption, and threat prevention across ingress/egress.
• Review SASE/ZTNA configs to identify gaps and provide mitigations.
• Collaborate with IAM teams to integrate ZTNA/SASE with Okta/Azure AD and posture checks.

Skills

Zero Trust

Security architecture

NIST SP 800-207

Education

Bachelor’s degree in Cybersecurity / related field

Master’s degree or equivalent + military service

Tools

Palo Alto Panorama

GlobalProtect

Versa SASE

SIEM

SOAR

EDR/XDR

Job description

SOC LLC in Quantico, VA, seeks a Senior Zero Trust Network Architect/Engineer (Contract to Hire) with an active Secret clearance and eligibility for TS/SCI upgrade. Onsite at least two days a week or as needed at Quantico, VA.

Lead the ZTNA/SASE program, define technical roadmaps, implement Palo Alto GlobalProtect and Versa SASE, and govern security policy templates for micro‑segmentation and threat prevention across cloud, hybrid, and on‑prem environments.