Zero Trust Architect - Security

Pueo Business Solutions LLC; McLean (VA); On-site; USD 150,000 - 200,000; Full time

Job summary

A cybersecurity solutions provider in McLean, Virginia is seeking a Zero Trust Architecture Senior Technical Expert to lead the Zero Trust program. Responsibilities include providing technical guidance on security strategies, reviewing IT compliance, and ensuring alignment across various stakeholders. Candidates should have over 12 years of experience, a master's degree in a relevant field, and must hold a Top Secret Security Clearance with SCI eligibility.

Qualifications

• Must have 12+ years in cybersecurity, with at least 5 years dedicated to Zero Trust architecture.
• Demonstrated experience architecting and deploying Zero Trust solutions in large-scale environments.
• Familiarity with RMF (NIST SP 800‑37, SP 800‑53) and DIA/DoD accreditation processes.

Responsibilities

• Provide expertise on Zero Trust adoption strategies and policy integration.
• Conduct technical assessments across identity, device, and data layers.
• Assist in developing governance frameworks aligned to Zero Trust objectives.

Skills

Team collaboration

Emotional Intelligence

Data analysis

Risk mitigation

Cloud security expertise

Education

Master's degree in Cybersecurity, Computer Science or related discipline

DoD 8140/8570 IAT Level III certification

CISSP, CASP+ CE, CCSP or equivalent

Tools

AWS

Azure

GCP

Kubernetes Security

Job description

OVERVIEW

The Zero Trust Architecture Senior Technical Expert (STE) serves as the senior advisor and technical authority supporting the CIO's Zero Trust program. This role is responsible for providing expertise in the design, integration, and implementation of Zero Trust principles across a large enterprise IT environment, ensuring compliance with DoD, IC, and federal cybersecurity mandates. The STE will provide expert guidance on Zero Trust strategy, architecture, while enabling secure digital transformation across multi‑cloud, hybrid, and mission‑critical systems and data management.

GENERAL DUTIES

• Program Leadership & Strategy
  • Provide expertise to the Government ZT Program Manager on Zero Trust adoption strategies, roadmaps, and policy integration.
  • Support planning, coordination, and oversight of ZT implementation, including project plans, schedules, and resources.
  • Assess current IT strategies, recommend courses of action, and operationalize Cyber IT Strategy in alignment with the organization's mission.
  • Drive maturity assessments, gap analyses, and prioritized remediation strategies for enterprise ZTA adoption.
• Architecture & Technical Expertise
  • Provide expertise on ZT design and develop ZT reference architectures, system designs, and data flows as they apply to all the ZT pillars.
  • Conduct technical assessments across identity, device, network, application, and data layers to identify gaps against Zero Trust principles.
  • Integrate ZT capabilities into enterprise networks, cloud, hybrid environments, and DevSecOps pipelines.
  • Provide expertise support on the engineered ZT solutions such as Cloud, Data engineering, and implementation of advanced ZT capabilities: ICAM, micro segmentation, encryption, continuous monitoring, and software‑defined perimeters.
• Governance & Compliance
  • Assist in developing and maintaining IT governance frameworks and SOPs aligned to ZT objectives.
  • Ensure compliance with NIST SP 800‑207, DoD Zero Trust Strategy, CISA ZT Maturity Model, and RMF integration requirements.
  • Provide recommendations for mitigation and remediation of identified vulnerabilities during RMF and continuous monitoring activities.
• Stakeholder Communication
  • Collaborate with senior leadership, acquisition teams, engineers, and mission stakeholders to integrate ZT into enterprise workflows.
  • Respond to ZT‑related data calls, provide technical editing, and develop executive reports, presentations, and policy updates.
  • Serve as the primary technical liaison for Zero Trust engagements, ensuring alignment across technical, programmatic, and strategic stakeholders.

REQUIRED QUALIFICATIONS

• Ability to work effectively under pressure and meet tight deadlines.
• Ability to work in a team environment and possess a high degree of Emotional Intelligence.
• Ability to analyze data and use metrics to drive decisions.
• Proven ability to manage competing priorities, adapt in a dynamic environment, and work collaboratively with diverse teams.
• Ability to anticipate and mitigate risks, ensuring resilient cybersecurity posture.
• Master's degree in Cybersecurity, Computer Science, Systems Engineering, or related discipline (preferred).
• 12+ years in cybersecurity, with at least 5 years dedicated to Zero Trust architecture, enterprise security design, and systems integration.
• Demonstrated experience architecting and deploying ZT solutions in large‑scale or government environments.
• Expertise in cloud security (AWS, Azure, GCP), network segmentation, endpoint protection, and hybrid IT.
• Familiarity with RMF (NIST SP 800‑37, SP 800‑53) and DIA/DoD accreditation processes.
• Certifications: DoD 8140/8570 IAT Level III required.
• CISSP, CASP+ CE, CCSP, or equivalent.
• Preferred: ZT vendor certifications (Palo Alto ZTNA, Microsoft SC‑300/SC‑100, Okta, AWS Security Specialty, Kubernetes Security).
• Ability to Pass CI Poly.

CLEARANCE

• Top Secret Security Clearance with SCI eligibility.

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.