Zero Trust Engineer — Cloud Security & Data Tagging

Booz Allen Hamilton; Arlington (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton in Arlington, VA is seeking a Zero Trust Engineer to help align data assets with Zero Trust compliance, design solutions, and deliver implementation plans across IL5/IL6 environments including cloud, hybrid, and on‑prem.

You will work with security, networking, and infrastructure teams to mature the organization's Zero Trust posture, develop policy-based access controls, and create clear technical documentation for enterprise‑wide adoption.

Qualifications

• 3+ years of experience with cybersecurity, identity engineering, or cloud security.
• Experience with cloud platforms such as Azure or AWS, their related identity systems, and Keycloak.
• Experience writing data tagging policy within an automated data tagging tool.
• Experience identifying sensitive information types and data classification.
• Experience with RBAC, TBAC, ABAC, and policy-based access controls.
• Knowledge of Zero Trust principles and practical implementation approaches.
• Knowledge of NIST and DoW Zero Trust Architecture guidance.
• Secret clearance
• HS diploma or GED

Responsibilities

• Support Zero Trust Architecture assessments and gap analyses.
• Design and document solutions and implementation plans aligned around the ZTA Data Pillar.
• Development of Zero Trust compliance roadmap and track progress towards maturity objectives.
• Integrate Zero Trust principles into existing IL5 and IL6 enterprise environments including cloud, hybrid, and on‑prem.
• Maintain documentation for system architecture.
• Align Zero Trust implementations with NIST SP 800‑53 and NIST SP 800‑207.
• Enforce and integrate data protection through Data Classification, Tagging, and Security Posture Management tools.
• Enforce and integrate data protection through Data Rights Management tools.
• Enforce and integrate data protection through Data Loss Prevention tools.
• Enforce and integrate data protection through SIEM/SOAR tools.
• Partner with and act as a trusted advisor to internal stakeholders, security, networking, cloud, and infrastructure teams.
• Deliver clear technical documentation, briefings, and status updates.
• Work cross‑functionally to ensure cohesive, enterprise‑wide Zero Trust adoption.

Skills

Cybersecurity

Cloud security

Azure

AWS

Identity management

Keycloak

Data tagging policy

Data classification

RBAC/TBAC/ABAC

NIST guidance

Security clearance

DoW Zero Trust

Education

HS diploma or GED

Job description

Booz Allen Hamilton in Arlington, VA is seeking a Zero Trust Engineer to help align data assets with Zero Trust compliance, design solutions, and deliver implementation plans across IL5/IL6 environments including cloud, hybrid, and on‑prem.

You will work with security, networking, and infrastructure teams to mature the organization's Zero Trust posture, develop policy-based access controls, and create clear technical documentation for enterprise‑wide adoption.