Zero Trust Network Architect/Engineer — Hybrid, Quantico

The Amatriot Group; Quantico (VA); Hybrid; USD 190,000 - 220,000; Full time

Job summary

The Amatriot Group is seeking a Zero Trust Network Access Architect/Engineer to support the DCSA program in Quantico, VA. You will lead the design, orchestration, and governance of enterprise security boundaries across hybrid environments.

You will modernize security using Palo Alto Panorama, GlobalProtect, and Versa SASE, focusing on identity-aware, context-driven security. A long track record in security engineering and a Active Secret clearance are required.

Qualifications

• 10+ years in network security engineering and enterprise architecture.
• 3–4 years architecting Zero Trust with NIST SP 800-207 and SASE in federal environments.
• Bachelor’s degree in a related field; master’s degree or equivalent accepted.
• Active Secret clearance with eligibility for TS/SCI.

Responsibilities

• Serve as Principal Architect for DCSA’s Zero Trust initiative, establishing roadmaps and reference architectures.
• Lead design, implementation, and optimization of Palo Alto GlobalProtect and Versa Networks SASE.
• Define and govern security policy templates in Palo Alto Panorama to enforce micro-segmentation and threat prevention.
• Architect data loss prevention (DLP), SSL/TLS decryption, and threat prevention strategies across all ingress/egress points.
• Collaborate with IAM teams to integrate ZTNA/SASE with Okta and Azure AD for real-time posture evaluation.

Skills

Zero Trust Architecture

Security Architecture

Technical Leadership

Communication Skills

Education

Bachelor’s degree in Cybersecurity, Computer Engineering, Information Systems Management

Tools

Palo Alto Panorama

GlobalProtect

Versa SASE

Job description

The Amatriot Group is seeking a Zero Trust Network Access Architect/Engineer to support the DCSA program in Quantico, VA. You will lead the design, orchestration, and governance of enterprise security boundaries across hybrid environments.

You will modernize security using Palo Alto Panorama, GlobalProtect, and Versa SASE, focusing on identity-aware, context-driven security. A long track record in security engineering and a Active Secret clearance are required.