Zero Trust Architect STE

Pueo Business Solutions LLC; McLean (VA); On-site; USD 150,000 - 210,000; Full time

Job summary

Pueo Business Solutions LLC in McLean, VA, is seeking a senior Zero Trust Architecture Expert to guide the CIO's Zero Trust program and serve as the technical authority for design, integration, and implementation across a large enterprise IT environment with DoD, IC, and federal compliance.

The role drives architecture strategy across multi-cloud and hybrid environments, develops reference architectures, supports RMF alignment, and partners with leadership to advance secure digital

Qualifications

• 12 years in cybersecurity with 5+ years in Zero Trust architecture.
• Experience architecting ZT solutions in government or large-scale environments.
• Expertise in cloud security across AWS, Azure, and GCP.
• Familiarity with RMF and DoD accreditation processes.
• Pass CI Poly.

Responsibilities

• Lead ZT program strategy with roadmap and policy integration.
• Plan, coordinate, and oversee ZT implementation projects.
• Assess IT strategies and align with mission objectives.
• Drive maturity assessments and remediation for ZTA adoption.
• Develop ZT reference architectures and data flows.
• Assess identity, device, network, app, and data gaps.
• Integrate ZT into networks, cloud, and DevSecOps pipelines.
• Provide engineered ZT support for ICAM, encryption, and perimeter solutions.
• Communicate with leadership and stakeholders; prepare executive updates.
• Serve as the primary technical liaison for Zero Trust engagements.

Skills

Strategic leadership

Zero Trust architecture

Cloud security (AWS/Azure/GCP)

RMF/NIST compliance

Policy and governance

Stakeholder communication

CI Poly

Team collaboration

Risk management

DevSecOps

Education

Master’s degree in Cybersecurity

Tools

AWS

Azure

GCP

ZTNA

Okta

Microsoft SC-300/SC-100

Kubernetes Security

Palo Alto ZTNA

Job description

Description

Pueo is known for bringing the best talent and unique tools to every opportunity. Pueo’s Parliament (aka workforce) is composed of professionals who are seeking the opportunity to work in a business organization that thrives on career development and independence. In support of mission and professional growth, our Parliament has supported the development of multiple patents, proprietary tools, and applications as well as trademarked processes.

Our organization emphasizes career development across multiple career environments (at the members own pace) and ensures those who contribute broadly are properly rewarded. Pueo has four career environments where every member of the parliament can participate. Each environment has opportunities available for all levels. Opportunities are framed by an employee’s desires and capabilities, and we ensure challenges, growth, and unique experiences are available for employees at all levels.

Our Career Environments (Program, Functional, Service, and Leadership) provide numerous opportunities for employees to invest in their personal growth and those things that offer fulfillment. We invest in helping our members create and execute their career development plans. Our Pods (small teams of 5 or less) are comprised of personnel with similar skillsets to ensure mentorship, understanding, and peer support.

OVERVIEW:

The Zero Trust Architecture Senior Technical Expert (STE) serves as the senior advisor and technical authority supporting the CIO’s Zero Trust program. This role is responsible for providing expertise in the design, integration, and implementation of Zero Trust principles across large enterprise IT environment, ensuring compliance with DoD, IC, and federal cybersecurity mandates. The STE will provide expert guidance on Zero Trust strategy, architecture, while enabling secure digital transformation across multi-cloud, hybrid, and mission-critical systems and data management.

GENERAL DUTIES:

• Program Leadership & Strategy

• Provide expertise to the Government ZT Program Manager on Zero Trust adoption strategies, roadmaps, and policy integration.

• Support planning, coordination, and oversight of ZT implementation, including project plans, schedules, and resources.

• Assess current IT strategies, recommend courses of action, and operationalize Cyber IT Strategy in alignment with the organization’s mission.

• Drive maturity assessments, gap analyses, and prioritized remediation strategies for enterprise ZTA adoption.

• Architecture & Technical Expertise

• Provide expertise on ZT design and develop ZT reference architectures, system designs, and data flows as they apply to all the ZT Pillars.

• Conduct technical assessments across identity, device, network, application, and data layers to identify gaps against Zero Trust principles.

• Integrate ZT capabilities into enterprise networks, cloud, hybrid environments, and DevSecOps pipelines.

• Provide expertise support on the engineered ZT solutions such as Cloud, Data engineering, and implementation of advanced ZT capabilities: ICAM, micro segmentation, encryption, continuous monitoring, and software-defined perimeters.

• Governance & Compliance

• Assist in developing and maintaining IT governance frameworks and SOPs aligned to ZT objectives.

• Ensure compliance with NIST SP 800-207, DoD Zero Trust Strategy, CISA ZT Maturity Model, and RMF integration requirements.

• Provide recommendations for mitigation and remediation of identified vulnerabilities during RMF and continuous monitoring activities.

• Stakeholder Communication:

• Collaborate with senior leadership, acquisition teams, engineers, and mission stakeholders to integrate ZT into enterprise workflows.

• Respond to ZT-related data calls, provide technical editing, and develop executive reports, presentations, and policy updates.

• Serve as the primary technical liaison for Zero Trust engagements, ensuring alignment across technical, programmatic, and strategic stakeholders.

REQUIRED QUALIFICATIONS:

• Ability to work effectively under pressure and meet tight deadlines.
• Ability to work in a team environment and possess a high degree of Emotional Intelligence.
• Ability to analyze data and use metrics to drive decisions.
• Proven ability to manage competing priorities, adapt in a dynamic environment, and work collaboratively with diverse teams.
• Ability to anticipate and mitigate risks, ensuring resilient cybersecurity posture.
• Master’s degree in Cybersecurity, Computer Science, Systems Engineering, or related discipline (preferred).
• 12 years in cybersecurity, with at least 5 years dedicated to Zero Trust architecture, enterprise security design, and systems integration.
• Demonstrated experience architecting and deploying ZT solutions in large-scale or government environments.
• Expertise cloud security (AWS, Azure, GCP), network segmentation, endpoint protection, and hybrid IT.
• Familiarity with RMF (NIST SP 800-37, SP 800-53) and DIA/DoD accreditation processes.
• Certifications: Certifications (DoD 8140/8570 IAT Level III required):
• CISSP, CASP CE, CCSP, or equivalent.
• Preferred: ZT vendor certifications (Palo Alto ZTNA, Microsoft SC-300/SC-100, Okta, AWS Security Specialty, Kubernetes Security).
• Ability to Pass CI Poly.

CLEARANCE:

• Top Secret Security Clearance with SCI eligibility

Pueo is an equal employment opportunity employer and affirmative action employer. All interested individuals will receive consideration and will not be discriminated against on the basis of race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity, genetic information, or protected veteran status. Pueo takes affirmative action in support of its policy to advance diversity and inclusion of individuals who are minorities, women, protected veterans, and individuals with disabilities.