Senior Zero Trust Architect (Remote/Hybrid)

ASRC Federal Holding Company

Quantico (VA)

Hybrid

USD 170,000 - 220,000

Full time

14 days+

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Benefits offered by this job

Health care

Dental insurance

Vision insurance

Life insurance

401(k) university matching

Education assistance

Paid time off

Job summary

ASRC Federal Holding Company is seeking a Senior Zero Trust Network Architect / Principal Engineer to lead the DCSA Zero Trust journey. You will architect and implement ZTNA and SASE using Palo Alto Panorama/GlobalProtect and Versa Networks, securing cloud, hybrid, and mobile endpoints.

You will work primarily in a telework capacity with on-site requirements at Quantico, VA two days per week, and additional onboarding time as needed.

Qualifications

Minimum of 10 years of progressive experience in network security engineering, enterprise architecture, and infrastructure security.
At least 3–4 years of direct experience architecting Zero Trust frameworks (NIST SP 800-207) and SASE solutions in enterprise or federal environments.
Active Secret Clearance REQUIRED, eligible for TS/SCI upgrade.
Bachelor’s Degree in Cybersecurity, Computer Engineering, Information Systems Management, or related field; Master’s degree accepted.
Vendor certifications: PCNSE, PCZTNSE, VCSP or VCSS.

Responsibilities

Serve as Principal Architect for the DCSA Zero Trust journey, establishing the technical roadmap and reference architectures aligned with NIST SP 800-207.
Lead end-to-end design, implementation, and optimization of Palo Alto GlobalProtect and Versa Networks SASE for cloud, hybrid on‑premises, and mobile endpoints.
Define and govern global security policy templates within Palo Alto Panorama to enforce micro-segmentation and threat prevention.
Architect DLP, SSL/TLS decryption, and threat prevention strategies across all ingress/egress points.
Integrate ZTNA/SASE with IAM (Okta, Azure AD) ensuring real‑time context and posture checks.
Guide SOC integration with SIEM, SOAR, and EDR/XDR tools; support secure connectivity automation.
Provide technical leadership and mentorship to the cybersecurity engineering team; author HLDs, LLDs, SSPs, and change-management policies.
Stay current with Palo Alto PAN-OS and Versa features; run PoCs to evaluate next-generation capabilities.