Senior Zero Trust / Enterprise Security Architect

etelligentgroup

Bethesda (MD)

Hybrid

USD 165,000 - 175,000

Full time

3 days ago

Be an early applicant

Application generator

Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.

Get past ATS filters

Job summary

eTel is the lead on NIH Future State Zero Trust Architecture, guiding the architecture pod to define reference architectures across identity, network, and data with automation and monitoring. The role spans clinical, HPC, grants, and IC business apps, ensuring secure access and scalable environments for NIH ICs.

You will collaborate with multiple service owners, craft policy-driven designs, and publish architecture artifacts as code while maintaining compliance with federal standards and NIH

Qualifications

Bachelor's degree plus 10+ years of security architecture experience.
Deep, practical knowledge of NIST SP 800-207/207A, the CISA ZTMM v2.0, OMB M-22-09, NIST SP 800-53 Rev 5, and NIST SP 800-63-4.
A track record of designing cloud and hybrid Zero Trust reference architectures for large, federated enterprises.
Strong written artifacts: architecture diagrams, decision records, and design patterns with control mappings.
Ability to obtain an NIH suitability determination and PIV credential; fluent in English.

Responsibilities

Lead Task 2: define the NIH Future State ZTA across identity, device, network, application/workload, and data, with automation and monitoring.
Inventory enterprise ICAM, PIV, endpoint management, segmentation, API gateways, data classification, and logging/SIEM; build a central services matrix.
Draft reference architectures for cloud, on-premises, and hybrid environments per NIST guidance.
Tailor architectures to NIH workload families including clinical systems, HPC, grants, IC apps, and labs.
Coordinate validation with IC teams and brief Architecture Review Board on decisions.

Skills

Security architecture

NIST SP 800-207/207A

CISA ZTMM v2.0

Cloud/hybrid Zero Trust

Architecture diagrams

NIH suitability / PIV credential

English fluency

Education

Bachelor's degree

Tools

Microsoft Entra ID

Active Directory

Ping Identity

Okta

PIV/derived credentials

Zscaler

Palo Alto Prisma Access

Microsoft Defender for Endpoint

Job description

Company Overview:

Over the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges As a premier technology solutions and services company to the US federal government, eTel possesses longstanding relationships across the federal civilian marketplace. Other customers include the broader Treasury Department, Commerce Department, and State Department.

eTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel also holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications, and offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers' environments and challenges.

Work Location and On-Site/Telework Requirements:

Hybrid - NIH, Bethesda, MD. On site for stakeholder workshops and pilots (typically 1-2 days/week during the first 120 days, then as scheduled).

Citizenship:

U.S. Citizenship required

Clearance:

All staff must obtain NIH suitability and a PIV credential and be fluent in English. Anyone doing risk or vulnerability testing needs a current T2 (BI) or higher investigation.

Salary Range:

$165,000-$175,000 yearly salary

Overview :

You will be the lead architect for NIH's Future State Zero Trust Architecture under the NIH Governance, Risk & Compliance (GRC) Zero Trust Architecture (ZTA) Support Services task order for the NIH Office of the Chief Information Officer (OCIO). Working in the Architecture Pod, you will lead Task 2 and support Tasks 3, 4, and 7. You will produce the reference architectures and design patterns that application, platform, HPC, clinical, and laboratory teams across NIH's 27 ICs will build to.

Responsibilities :

Lead Task 2: define the NIH Future State ZTA across identity, device, network, application/workload, and data, with automation, orchestration, and continuous monitoring.

With OITA, ISAO, and CIT service owners, inventory every centrally provided capability: enterprise ICAM and PIV/derived credentials, endpoint management, segmentation and secure access, API gateways, data classification and encryption, and logging/SIEM. Build the ZTA Pillar Centrally Provided Services Matrix (Subtask 2.1, due at 120 days).

Author gold-standard reference architectures for cloud, on-premises, and hybrid environments (Subtask 2.2), broken down into NIST SP 800-207 Policy Engine, Policy Administrator, and Policy Enforcement Point components.

Tailor those architectures to NIH workload families: clinical systems (FHIR gateways, PostgreSQL, React), HPC and bioinformatics (Linux/Slurm, Nextflow, object storage), extramural grants (Appian/COTS, eRA integrations), IC business applications (Salesforce, ServiceNow, M365, Java/Angular), and laboratory/IoT instruments (Cryo-EM, mass spectrometry, LIMS).

Set per-pillar Advanced and Optimal targets against the CISA ZTMM v2.0 and build the risk-informed remediation roadmap.

Co-lead Task 3 AI use-case discovery with the AI/ML Solutions Architect. Contribute architecture criteria to the Task 4 ZTA Overlay and to the Task 7 architecture-review checkpoints.