Zero Trust Security Architect

Freedom Real Estate; Huntsville (AL); Hybrid; USD 165,000 - 195,000; Full time

Benefits offered by this job

ESOP participation

401(k) match

Medical/dental/vision coverage

Life insurance

Short-term disability

Long-term disability

Education assistance

Paid time off

Job summary

Torch Technologies seeks a Zero Trust Security Architect to lead the technical execution of the Joint Staff J7 ZTA program. Location is Huntsville, AL or Suffolk, VA with hybrid on-site work.

You will design ZTA across pillars, configure ICAM in Entra ID/PIM/CA, and integrate Sentinel/Defender for Cloud while reporting to DoD leadership. Requirements include active DoD clearance, 10+ years in cybersecurity and cloud architecture, and DoD ZTA experience.

Qualifications

• U.S. Citizenship required.
• Active DoD Secret clearance required.
• Bachelor’s degree in Cybersecurity, Computer Engineering, or related technical field.
• 10+ years of progressive cybersecurity and cloud architecture experience.
• 3+ years architecting or implementing Zero Trust per NIST SP 800-207 and DoD Zero Trust Reference Architecture.
• Experience with Microsoft Entra ID Government, PIM, and CA policies.

Responsibilities

• Formulate and implement ZTA roadmap across seven pillars.
• Design fine-grained ICAM policies in Entra ID, PIM, and CA.
• Architect micro-segmentation and private endpoints in Azure Government.
• Integrate telemetry/logging with Microsoft Sentinel and Defender for Cloud.
• Support leadership in reporting Zero Trust metrics to DoD stakeholders.

Skills

Zero Trust Architecture

Cloud architecture

Cybersecurity

Microsoft Entra ID Government / Azure"

PIM / Conditional Access

DoD 8570/8140 IASAE II/III

NIST SP 800-207

RBAC

Communication skills

Active DoD clearance

Education

Bachelor’s degree in Cybersecurity, Computer Engineering, or related technical field

Tools

Microsoft Entra ID Government

Microsoft Sentinel

Defender for Cloud

Azure Role-Based Access Control

Job description

Torch Technologies is seeking a Zero Trust Security Architect to lead the technical execution of the Zero Trust for the Joint Staff J7 JTSD. Located in Suffolk, VA or Huntsville, AL, you will collaborate with the Deputy Chief & Technical Director and Division System Architects to embed DoD Zero Trust Strategy principles into every layer of the JWCC Azure environment. **As a Zero Trust Security Architect your duties will include the following, but are not limited to:** * Formulate and implement the Joint Staff J7 Zero Trust Architecture (ZTA) roadmap across all 7 pillars (User, Device, Application & Workload, Data, Network & Environment, Automation & Orchestration, Visibility & Analytics).* Design fine-grained identity, credential, and access management (ICAM) policies within Microsoft Entra ID (Azure AD), Privileged Identity Management (PIM), and Conditional Access.* Architect micro-segmentation boundaries, software-defined perimeters (SDP), and private endpoint configurations within Azure Government (IL5/IL6).* Integrate cloud telemetry and logging pipelines into Microsoft Sentinel, Defender for Cloud, and enterprise DoD SIEM solutions.* Support government leadership in reporting Zero Trust execution metrics and compliance milestones to Joint Staff and DoD CIO stakeholders.. **Qualifications** * U.S. Citizenship* Active DoW Secret clearance.* Bachelor’s degree in Cybersecurity, Computer Engineering, or related technical field, plus 10+ years of progressive cybersecurity and cloud architecture experience.* 3+ years architecting or implementing Zero Trust principles adhering to NIST SP 800-207 and the DoD Zero Trust Reference Architecture.* Extensive experience with Microsoft Entra ID Government, Conditional Access policies, PIM, and Azure Role-Based Access Control (RBAC).* Current DoD 8570/8140 IASAE II/III or IAM III certification (e.g., CISSP, CISM, or CASP+ CE).* Strong problem‐solving skills and ability to troubleshoot complex issues* Effective communication and collaboration skills **Preferred Qualifications** * Active Top Secret clearance with SCI eligibility.* Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Security Operations Analyst (SC-200), or Azure Security Engineer Associate (AZ-500).* Direct experience executing DoD Target/Advanced Zero Trust Capability roadmaps in operational IL5 or IL6 environments.* Proven capability tuning Microsoft Sentinel analytic rules and Defender for Cloud security posture benchmarks in air-gapped or classified cloud environments.* Strong technical documentation, briefing, and reporting experience **Schedule:** M-F; 8-5 **Work Location:** Suffolk, VA or Huntsville, AL – Hybrid / Flexible On-Site. **Travel:** Yes, 0-10% **Relocation Assistance Available:** No **Position Contingent Upon Award of Contract:**No**Salary Range:** $165,000-$195,000The salary range information is a general guideline only. Several factors can influence the salary for a position including but not limited to, Federal Government contract labor categories and contract wage rates, geographic location, business considerations, scope and responsibilities of the position, local or other applicable market conditions, and internal equity. Other factors include the candidate’s qualifications such as relevant prior work experience, specific skills and competencies, education/training, and certifications. #LI-DK1 **Benefits:**Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.**Applying to Torch Technologies:**Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check.