Zero Trust Security Engineer

ASRC Federal; Quantico (VA); Hybrid; USD 120,000 - 155,000; Full time

Job summary

ASRC Federal is seeking a Zero Trust Security Engineer for a full-time, hybrid role based in Quantico, VA, with some work-from-home flexibility. You will design, implement, and maintain Zero Trust architectures to protect critical federal missions, integrating identity, access, and segmentation controls across networks, applications, and cloud environments.

The role requires a minimum of 5 years of hands-on Okta Identity Cloud administration in enterprise or federal contexts, strong IAM

Qualifications

• Minimum of 5 years of hands-on experience administering, configuring, and supporting the Okta Identity Cloud platform in an enterprise or federal environment.
• IAM Expertise: Strong understanding of identity-centric security, directory services (Active Directory, LDAP), and modern federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
• Must meet 8570 certification requirements at the time of hire (IAT Level II).
• Bachelor’s Degree in Cybersecurity, Information Systems Management or related field or equivalent combination of military service and/or at least five years of relevant work experience

Responsibilities

• Design, implement, and maintain Zero Trust architectures and controls for federal missions.
• Assess existing security frameworks and define Zero Trust policies.
• Integrate identity, access, and segmentation controls across networks, applications, and cloud environments.
• Collaborate with cybersecurity, network, and application teams to develop secure solutions.
• Perform risk assessments and support compliance with federal security standards.
• Monitor security posture and respond to security incidents.
• Develop documentation and runbooks; provide technical guidance on Zero Trust best practices to stakeholders.

Skills

Okta IAM

Zero Trust

Federation protocols

Education

Bachelor’s Degree

Tools

Okta Identity Cloud

Active Directory

LDAP

Job description

ASRC Federal provides technology-driven solutions to more than 30 U.S. federal defense and civilian agencies, supporting critical missions such as space exploration, cyber defense, and public health. The organization combines leading-edge technology with deep domain expertise in areas including IT modernization, software and analytics, engineering, critical infrastructure, base operations, professional services, and supply chain logistics. ASRC Federal’s work contributes to an enduring future for over 14,000 Iñupiat shareholders from Alaska’s North Slope, aligning mission success with community impact. Team members help enable initiatives like assembling the Orion spacecraft, advancing federal cloud and cybersecurity, and ensuring safer air travel.

ASRC Federal is recognized as a Great Place to Work, a Military Times “Best for Vets” employer, and holds a VETS Indexes 4-Star Employer Rating.

The Zero Trust Security Engineer will design, implement, and maintain Zero Trust architectures and controls to protect critical systems and data for federal missions. This full-time hybrid role is based in Quantico, VA, with flexibility for some work from home. Day-to-day responsibilities include assessing existing security frameworks, defining Zero Trust policies, and integrating identity, access, and segmentation controls across networks, applications, and cloud environments. The engineer will collaborate with cybersecurity, network, and application teams to develop secure solutions, perform risk assessments, and support compliance with federal security standards and directives. The role also involves monitoring security posture, responding to security incidents, developing documentation and runbooks, and providing technical guidance on Zero Trust best practices to stakeholders.

• Minimum of 5 years of hands-on experience administering, configuring, and supporting the Okta Identity Cloud platform in an enterprise or federal environment.
• IAM Expertise: Strong understanding of identity-centric security, directory services (Active Directory, LDAP), and modern federation protocols (SAML 2.0, OIDC, OAuth 2.0).
• Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCI
• Must meet 8570 certification requirements at the time of hire.IAT Level II (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certification
• Bachelor’s Degree, in Cybersecurity, Information Systems Management or a related field or an equivalent combination of military service and/or at least five (5) years of significant, relevant work experience

Desired Certifications: Official Okta certifications are highly desired:

• Okta Certified Professional
• Okta Certified Administrator
• Okta Certified Consultant or Okta Certified Developer (plus)