Zero Trust Network Architect — Hybrid/Telework, Secret Clearance

ASRC Federal; Quantico (VA); Hybrid; USD 180,000 - 230,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Education assistance

Paid time off

Job summary

ASRC Federal seeks a Senior Zero Trust Network Architect / Principal Engineer for the DCSA program based in Quantico, VA. You will lead the strategic modernization of hybrid workforce security, leveraging Palo Alto and Versa SASE platforms to establish a resilient, identity-aware posture.

You will drive architectural governance, policy templates, and security integrations with IAM and SOC tools, while onsite two days per week and telework otherwise.

Qualifications

• Minimum of 10 years in network security engineering and enterprise architecture.
• 3–4 years architecting Zero Trust (NIST SP 800-207) and SASE in federal environments.
• Bachelor’s degree in a related field; Master’s preferred.
• Active Secret clearance; eligible for TS/SCI upgrade.

Responsibilities

• Serve as Principal Architect for the DCSA Zero Trust journey with roadmaps and reference architectures.
• Lead design, implementation, and optimization of Palo Alto GlobalProtect and Versa SASE.
• Define and govern policy templates in Palo Alto Panorama for micro-segmentation and threat prevention.
• Collaborate with IAM to integrate ZTNA/SASE with Okta/Azure AD and SOC environments.

Skills

Zero Trust

ZTNA

SASE

Palo Alto Panorama

GlobalProtect

Versa SASE

DLP

IAM integration

Security governance

Lead architect

Education

Bachelor's Degree in Cybersecurity

Master's degree preferred

Tools

Palo Alto Networks Suite

Versa Networks SASE

Job description

ASRC Federal seeks a Senior Zero Trust Network Architect / Principal Engineer for the DCSA program based in Quantico, VA. You will lead the strategic modernization of hybrid workforce security, leveraging Palo Alto and Versa SASE platforms to establish a resilient, identity-aware posture.

You will drive architectural governance, policy templates, and security integrations with IAM and SOC tools, while onsite two days per week and telework otherwise.