Zero Trust Security Architect

Torch Technologies, Inc.; Virginia Beach (VA); Hybrid; USD 165,000 - 195,000; Full time

Benefits offered by this job

ESOP participation

401(k) match

Medical, dental, vision

Job summary

Torch Technologies, Inc. seeks a Zero Trust Security Architect to lead the DoD Zero Trust strategy for Joint Staff J7 JTSD. Location options include Suffolk, VA or Huntsville, AL, with hybrid/on-site work.

Salary range $165,000–$195,000 and a schedule on M-F, 8-5. Eligible candidates must have clearance and 10+ years in cyber/cloud architecture. The role emphasizes ICAM policy design, Entra ID governance, PIM, and CA, plus reporting metrics to DoD stakeholders.

Qualifications

• US Citizenship required.
• Active DoD Secret clearance required.
• Bachelor's degree in Cybersecurity, Computer Engineering, or related technical field, plus 10+ years of progressive cybersecurity and cloud architecture experience.
• 3+ years architecting or implementing Zero Trust principles adhering to NIST SP 800-207 and the DoD Zero Trust Reference Architecture.
• Extensive experience with Microsoft Entra ID Government, Conditional Access policies, PIM, and Azure RBAC.
• Current DoD 8570/8140 IASAE II/III or IAM III certification (e.g., CISSP, CISM, or CASP+ CE).
• Strong problemsolving skills and ability to troubleshoot complex issues
• Effective communication and collaboration skills

Responsibilities

• Formulate and implement the Joint Staff J7 Zero Trust Architecture (ZTA) roadmap across all 7 pillars (User, Device, Application & Workload, Data, Network & Environment, Automation & Orchestration, Visibility & Analytics).
• Design fine-grained identity, credential, and access management policies within Microsoft Entra ID (Azure AD), PIM, and Conditional Access.
• Architect micro-segmentation boundaries, software-defined perimeters (SDP), and private endpoint configurations within Azure Government (IL5/IL6).
• Integrate cloud telemetry and logging pipelines into Microsoft Sentinel, Defender for Cloud, and enterprise DoD SIEM solutions.
• Support government leadership in reporting Zero Trust execution metrics and compliance milestones to Joint Staff and DoD CIO stakeholders.

Skills

ICAM policies experience

Microsoft Entra ID / Azure AD

PIM & Azure RBAC

Zero Trust architecture

Problem solving

Communication

Education

Bachelor's degree in Cybersecurity, Computer Engineering, or related field

Tools

Microsoft Entra ID Government

Conditional Access

PIM

Azure RBAC

Job description

Torch Technologies

Thank you for your interest in employment with Torch Technologies. We are a 100% employee-owned, Certified Great Place To Work and named Best Places to Work in Huntsville/Madison County, headquartered in Huntsville, AL. Our team provides superior research, development, and engineering services to the Federal Government and Department of War. As one of the nation's top 100 defense companies, the services we provide directly support the men and women who serve our country. Our corporate mission sums up the pride our employee-owners take in the work we do: "Lighting the Pathway of Freedom". And, as a Certified Evergreen ESOP, we have made the commitment to grow and sustain our company for the next 100 years! Come grow with us!

Torch Technologies is seeking a Zero Trust Security Architect to lead the technical execution of the Zero Trust for the Joint Staff J7 JTSD. Located in Suffolk, VA or Huntsville, AL, you will collaborate with the Deputy Chief & Technical Director and Division System Architects to embed DoD Zero Trust Strategy principles into every layer of the JWCC Azure environment.

As a Zero Trust Security Architect your duties will include the following, but are not limited to:

• Formulate and implement the Joint Staff J7 Zero Trust Architecture (ZTA) roadmap across all 7 pillars (User, Device, Application & Workload, Data, Network & Environment, Automation & Orchestration, Visibility & Analytics).
• Design fine-grained identity, credential, and access management (ICAM) policies within Microsoft Entra ID (Azure AD), Privileged Identity Management (PIM), and Conditional Access.
• Architect micro‑segmentation boundaries, software‑defined perimeters (SDP), and private endpoint configurations within Azure Government (IL5/IL6).
• Integrate cloud telemetry and logging pipelines into Microsoft Sentinel, Defender for Cloud, and enterprise DoD SIEM solutions.
• Support government leadership in reporting Zero Trust execution metrics and compliance milestones to Joint Staff and DoD CIO stakeholders..

Qualifications

• U.S. Citizenship
• Active DoW Secret clearance.
• Bachelor's degree in Cybersecurity, Computer Engineering, or related technical field, plus 10+ years of progressive cybersecurity and cloud architecture experience.
• 3+ years architecting or implementing Zero Trust principles adhering to NIST SP 800-207 and the DoD Zero Trust Reference Architecture.
• Extensive experience with Microsoft Entra ID Government, Conditional Access policies, PIM, and Azure Role-Based Access Control (RBAC).
• Current DoD 8570/8140 IASAE II/III or IAM III certification (e.g., CISSP, CISM, or CASP+ CE).
• Strong problemsolving skills and ability to troubleshoot complex issues
• Effective communication and collaboration skills

Preferred Qualifications

• Active Top Secret clearance with SCI eligibility.
• Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Security Operations Analyst (SC-200), or Azure Security Engineer Associate (AZ-500).
• Direct experience executing DoD Target/Advanced Zero Trust Capability roadmaps in operational IL5 or IL6 environments.
• Proven capability tuning Microsoft Sentinel analytic rules and Defender for Cloud security posture benchmarks in air‑gapped or classified cloud environments.
• Strong technical documentation, briefing, and reporting experience

Schedule: M-F; 8-5

Work Location: Suffolk, VA or Huntsville, AL - Hybrid / Flexible On‑Site.

Travel: Yes, 0-10%

Relocation Assistance Available: No

Position Contingent Upon Award of Contract: No

Salary Range: $165,000-$195,000

The salary range information is a general guideline only. Several factors can influence the salary for a position including but not limited to, Federal Government contract labor categories and contract wage rates, geographic location, business considerations, scope and responsibilities of the position, local or other applicable market conditions, and internal equity. Other factors include the candidate's qualifications such as relevant prior work experience, specific skills and competencies, education/training, and certifications.

Benefits:

Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match, medical, dental, vision, life insurance, short‑term disability, long‑term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, genetic information, citizenship, ancestry, marital status, protected veteran status, disability status or any other status protected by federal, state, or local law. Torch Technologies, Inc. participates in E-Verify.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access Careers Link as a result of your disability. You can request reasonable accommodations by sending an email to [e-mail]. Thank you for your interest in Torch Technologies.