Zero Trust Architecture Engineer

Apogee Engineering, LLC; Bath Township (OH); On-site; USD 140,000 - 180,000; Full time

Job summary

Apogee Engineering, LLC seeks a Zero Trust Architecture Engineer to design and implement ZTA for NASIC environments, aligning governance, standards, and guardrails to protect mission data across domains.

Responsibilities include developing ZTA frameworks, translating DoD/AF policies into practical controls, and coordinating with stakeholders to deliver secure architectures and postures.

Qualifications

• U.S. citizenship and TS/SCI security clearance required.
• 8+ years of cybersecurity or security architecture experience.
• Bachelor’s degree OR 6 additional years of work experience substitute for degree.
• Certifications: CISSP or DoD 8140 or CCZT equivalent.

Responsibilities

• Develop ZTA frameworks, governance models and standards for NASIC architectures.
• Translate DoD/AF policies into practical ZTA controls and patterns.
• Analyze architectures and propose ZTA-compliant enhancements and mitigations.
• Coordinate with stakeholders to align ZTA designs with enterprise security processes.
• Contribute to implementation plans and configuration baselines for ZTA capabilities.
• Prepare the monthly ZTA Posture Report documenting status and actions.

Skills

Cybersecurity experience

Security architecture

PaC familiarity

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field

Six (6) additional years of work experience may substitute for a Bachelor’s degree

Tools

OPA

Rego

AWS Cedar

XACML

Job description

Overview

Apogee Engineering has a new exciting opportunity for aZero Trust Architecture Engineer that supports the design and implementation of Zero Trust Architecture for NASIC environments. Develops ZTA governance, standards, and technical guardrails to secure mission data and services across multiple domains.

****Contingent Upon Contract Award****

Responsibilities

• Assist in developing ZTA frameworks, governance models, and technical standards tailored to NASIC architectures.
• Experience software as a service (SaaS), authentication / identity management software, and RBAC / ABAC familiarity.
• Translate DoD, AF, and IC security policy into practical ZTA controls and patterns.
• Analyze existing architectures and recommend ZTA-compliant enhancements and mitigations.
• Coordinate with stakeholders and system owners to align ZTA designs with enterprise security processes.
• Contribute to implementation plans and configuration baselines for ZTA-related capabilities.
• Prepare the monthly ZTA Posture Report documenting transition status, issues, and recommended actions.

Qualifications

MinimumExperience:

Citizenship:Must be a US citizenClearance:Ability to obtain and maintain a TS/SCI security clearance.

Certifications: CISSP or DoD 8140, CCZT Cloud Zero Trust or equivalent type certifications. Education / Years of Experience

• 8+ years experience with a minimum of three (3) years of experience in cybersecurity, information assurance, or security architecture.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field; OR- six (6) additional years of work experience may be substituted for a Bachelor’s degree; OR- four (4) additional years of work experience plus an Associate’s degree may be substituted for a Bachelor’s degree.

Preferred Qualifications:

• Experience supporting security architectures in cloud or hybrid environments.
• Policy-as-code(PaC) and familiarity with open policy agent (OPA), Rego (preferred) / AWS Cedar / XACML
• Relevant security certifications (e.g., CISSP, CASP+, CCSP, or equivalent).
• Experience with IC or DoD intelligence systems and multi-domain environments.

Additional InformationLocation: Wright Patterson AFB Dayton, OHOn-site/Hybrid/Remote:On-siteTravel: Occasional