Senior Zero Trust Architecture Lead

eTelligent Group LLC; Bethesda (MD); Hybrid; USD 165,000 - 175,000; Full time

Job summary

eTelligent Group LLC in Bethesda, MD seeks a Senior Zero Trust/Enterprise Security Architect to lead NIH Future State ZTA architecture under the OCIO program. You will define reference architectures and patterns for NIH across ICs, focusing on identity, device, network, and data with automation and monitoring.

Applicants should have 10+ years in security architecture, deep knowledge of NIST SP 800-207/53, and a proven track record implementing cloud/hybrid ZT architectures for federated

Qualifications

• Bachelor's degree plus 10+ years of security architecture experience.
• Deep, practical knowledge of NIST SP 800-207/207A, the CISA ZTMM v2.0, OMB M-22-09, NIST SP 800-53 Rev 5, and NIST SP 800-63-4.
• A track record of designing cloud and hybrid Zero Trust reference architectures for large, federated enterprises.
• Strong written artifacts: architecture diagrams, decision records, and design patterns with control mappings.
• Ability to obtain an NIH suitability determination and PIV credential; fluent in English.

Responsibilities

• Lead Task 2: define the NIH Future State ZTA across identity, device, network, application/workload, and data, with automation, orchestration, and continuous monitoring.
• Inventory every centrally provided capability: enterprise ICAM and PIV/derived credentials, endpoint management, segmentation and secure access, API gateways, data classification and encryption, and logging/SIEM. Build the ZTA Pillar Centrally Provided Services Matrix (Subtask 2.1, due at 120 days).
• Author gold-standard reference architectures for cloud, on-premises, and hybrid environments (Subtask 2.2), broken down into NIST SP 800-207 Policy Engine, Policy Administrator, and Policy Enforcement Point components.
• Tailor those architectures to NIH workload families: clinical systems (FHIR gateways, PostgreSQL, React), HPC and bioinformatics (Linux/Slurm, Nextflow, object storage), extramural grants (Appian/COTS, eRA integrations), IC business applications (Salesforce, ServiceNow, M365, Java/Angular), and laboratory/IoT instruments (Cryo-EM, mass spectrometry, LIMS).
• Set per-pillar Advanced and Optimal targets against the CISA ZTMM v2.0 and build the risk-informed remediation roadmap.
• Co-lead Task 3 AI use-case discovery with the AI/ML Solutions Architect. Contribute architecture criteria to the Task 4 ZTA Overlay and to the Task 7 architecture-review checkpoints.
• Validate each pattern with at least one IC team before publication, and brief decisions to the Architecture Review Board and domain teams.
• Maintain artifacts as Git-versioned architecture-as-code and publish them to the OCIO ZTA Wiki.

Skills

Zero Trust architecture

Cloud design

Architecture diagrams

Documentation

Education

Bachelor's degree

Tools

Microsoft Entra ID/Active Directory

Ping Identity

Okta

PIV/derived credentials

Zscaler

Palo Alto Prisma Access

Splunk

Microsoft Sentinel

AWS

Azure

Git

Job description

eTelligent Group LLC in Bethesda, MD seeks a Senior Zero Trust/Enterprise Security Architect to lead NIH Future State ZTA architecture under the OCIO program. You will define reference architectures and patterns for NIH across ICs, focusing on identity, device, network, and data with automation and monitoring.

Applicants should have 10+ years in security architecture, deep knowledge of NIST SP 800-207/53, and a proven track record implementing cloud/hybrid ZT architectures for federated