Zero Trust Network Architect | Hybrid, Secret Clearance

Amatriot Group, LLC; United States; Hybrid; USD 190,000 - 220,000; Full time

Job summary

Amatriot Group, LLC seeks a Zero Trust Network Access Architect/Engineer to support the DCSA program in Quantico, VA. You will lead design, implementation and governance of enterprise security boundaries, focusing on remote work modernization with SASE, ZTNA, and identity-aware controls.

The role requires 10+ years in network security engineering and hands-on experience with Palo Alto GlobalProtect, Panorama and Versa SASE, plus relevant certifications and a active Secret clearance.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Information Systems Management, or related field.
• Master's degree or equivalent combination of military service and experience accepted.
• Minimum of 10 years of progressive experience in network security engineering, enterprise architecture and infrastructure security.

Responsibilities

• Define and govern technical roadmaps, reference architectures and engineering guidelines for DCSA Zero Trust initiative.
• Lead design, implementation and optimization of Palo Alto GlobalProtect and Versa SASE for cloud, hybrid, on-prem and mobile endpoints.
• Define and govern global security policy templates in Palo Alto Panorama to enforce micro-segmentation and threat prevention.
• Collaborate with IAM teams to integrate ZTNA/SASE policies with Okta and Azure AD for real-time device posture and continuous authentication.
• Provide enterprise-level designs (HLD/LLD/SSP) and change-management guidance for executives and government stakeholders.
• Lead PoCs and automation initiatives using APIs and orchestration tools for secure connectivity.

Skills

ZTNA architecture

Palo Alto Panorama

GlobalProtect

Versa SASE

NIST SP 800-207

SASE architectures

Communication skills

Education

Bachelor's degree in Cybersecurity / related field

Master's degree acceptable

Tools

Palo Alto PAN-OS

GlobalProtect

Versa SASE

Okta

Azure AD

SIEM/SOAR/EDR

Job description

Amatriot Group, LLC seeks a Zero Trust Network Access Architect/Engineer to support the DCSA program in Quantico, VA. You will lead design, implementation and governance of enterprise security boundaries, focusing on remote work modernization with SASE, ZTNA, and identity-aware controls.

The role requires 10+ years in network security engineering and hands-on experience with Palo Alto GlobalProtect, Panorama and Versa SASE, plus relevant certifications and a active Secret clearance.