Zero Trust Engineer: DoD Remote Access & ZTNA

Booz Allen Hamilton; Scott Air Force Base (IL); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Zero Trust Network Security Engineer to help design and support remote access and conditional access solutions for DoD missions. The role focuses on moving legacy VPN into SSE/ZTNA while shaping identity, device posture, and policy-based access control across DoD environments.

You will work to evaluate current architectures, implement real-time authorization, and ensure secure access to mission-critical resources.

Qualifications

• 5+ years of experience supporting DoD enterprise security architectures.
• Experience designing, deploying, and supporting remote access solutions, including traditional VPN or SSE solutions.
• Knowledge of networking fundamentals, including IP addressing, routing, LAN or WAN architecture, and firewall concepts.
• Ability to design and support solutions that enforce ZTNA based on user identity, device posture, and organizational policy.
• Secret clearance.
• HS diploma or GED.

Responsibilities

• Design and support remote access and conditional access enforcement solutions for DoD Zero Trust initiatives.
• Evaluate and modernize legacy VPN infrastructure into SSE and ZTNA capabilities.
• Develop expertise in identity, device posture, and policy-based access control for real‑time evaluation.
• Support large-scale, DoD-wide Zero Trust implementations and collaborate with cross-functional teams.
• Translate security requirements into practical engineering specifications.

Skills

DoD security architectures

Remote access / SSE / ZTNA design

Identity, device posture, policy

Security+ Certification

Strong communication skills

Education

HS diploma or GED

Tools

SSE platforms (Versa Networks, Prisma Access)

Job description

Booz Allen Hamilton is seeking a Zero Trust Network Security Engineer to help design and support remote access and conditional access solutions for DoD missions. The role focuses on moving legacy VPN into SSE/ZTNA while shaping identity, device posture, and policy-based access control across DoD environments.

You will work to evaluate current architectures, implement real-time authorization, and ensure secure access to mission-critical resources.