Senior Zero Trust Network Architect (ZTNA/SASE) - Remote

Marathon TS; Quantico (VA); Hybrid; USD 180,000 - 230,000; Full time

Job summary

Marathon TS is actively hiring a Senior Zero Trust Network Architect / Principal Engineer to support the DCSA program from Quantico, VA. The role focuses on ZTNA/SASE design, governance, and execution, leveraging Palo Alto and Versa platforms.

You will lead modernization of hybrid workforce infrastructure, ensure secure, identity-aware posture, and guide SOC integration. Onsite two days a week with telework flexibility.

Qualifications

• 10+ years in network security engineering and enterprise architecture.
• 3–4 years architecting Zero Trust and SASE in enterprise or federal environments.
• Bachelor’s Degree in Cybersecurity, Computer Engineering, Information Systems Management, or related field.
• Vendor certs like PCNSE/VCSP are desirable.

Responsibilities

• Serve as Principal Architect for DCSA Zero Trust journey and define technical roadmap.
• Lead end-to-end design, implementation, and optimization of Palo Alto GlobalProtect and Versa SASE.
• Define and govern security policy templates to enforce micro-segmentation and threat prevention.
• Architect DLP, SSL/TLS decryption, and threat prevention across ingress/egress.
• Collaborate with IAM to integrate ZTNA/SASE with Okta/Azure AD.
• Provide technical leadership and author HLD/LLD/SSP documents.

Skills

Zero Trust

SASE

Palo Alto Networks

Panorama

GlobalProtect

Versa Networks

ZTNA

Security Architecture

Education

Bachelor's Degree in Cybersecurity/related field

Master's degree or equivalent experience

Tools

Panorama

GlobalProtect

Versa Networks

Job description

Marathon TS is actively hiring a Senior Zero Trust Network Architect / Principal Engineer to support the DCSA program from Quantico, VA. The role focuses on ZTNA/SASE design, governance, and execution, leveraging Palo Alto and Versa platforms.

You will lead modernization of hybrid workforce infrastructure, ensure secure, identity-aware posture, and guide SOC integration. Onsite two days a week with telework flexibility.