Senior Zero Trust ICAM Architect — Federal (Remote)

CELESTIAL INNOVATIONS GROUP LLC; Washington (District of Columbia); Hybrid; USD 135,000 - 180,000; Full time

Benefits offered by this job

401(k)

Competitive salary

Dental insurance

Health insurance

Paid time off

Training & development

Vision insurance

Job summary

Celestial Innovations Group LLC is seeking a Zero Trust Identity and ICAM Engineer to own end-to-end access policy design for federal agency clients, spanning design, implementation, and sustainment of Zero Trust Architecture (ZTA).

The role requires aligning with EO 14028 and NIST SP 800-207, driving policy governance, and integrating with enterprise architectures across identity, device, network and data pillars. Onsite in DC metro with remote support possible.

Qualifications

• 7+ years in cybersecurity engineering or related field.
• 5+ years designing or implementing Zero Trust Architecture in federal environments.
• Experience supporting DoD or civilian agency environments.
• Proficiency with one of Palo Alto Prisma, Zscaler, or Microsoft Zero Trust stack.

Responsibilities

• Lead ZTA assessments, gap analyses, and roadmaps for federal clients.
• Design and document ZTA across Identity, Device, Network, Application/Workload, and Data pillars.
• Translate mandates (EO 14028, OMB M-22-09, NIST 800-207) into actionable plans.
• Develop architecture artifacts using DODAF/TOGAF or equivalents.

Skills

Security engineering

Zero Trust concepts

Federal experience

Tools

Palo Alto Prisma

Zscaler

Microsoft Entra

Intercede MyID CMS

M365 Entra features

SCCM/Intune

Workspace ONE

Qualys

Job description

Celestial Innovations Group LLC is seeking a Zero Trust Identity and ICAM Engineer to own end-to-end access policy design for federal agency clients, spanning design, implementation, and sustainment of Zero Trust Architecture (ZTA).

The role requires aligning with EO 14028 and NIST SP 800-207, driving policy governance, and integrating with enterprise architectures across identity, device, network and data pillars. Onsite in DC metro with remote support possible.