Zero Trust Security Engineer

System One, Inc.; Vienna (VA); Hybrid; USD 90,000 - 103,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Job summary

System One, Inc. is seeking a contract Zero Trust Security Engineer in Vienna, VA. The role focuses on translating Zero Trust analysis into firewall rule requests and coordinating with IAM, firewall engineering, and application teams.

You will submit detailed requests, track progress, and perform post-implementation testing to ensure proper access control and policy alignment with Zero Trust requirements, while maintaining thorough documentation for audits.

Qualifications

• Hands-on experience with enterprise firewalls (Palo Alto preferred).
• Strong understanding of user-based firewall policies and application-aware policies.
• Experience submitting and managing firewall rule requests in large environments.
• Ability to validate security rule implementations and troubleshoot access issues.
• Excellent coordination and communication across technical teams.

Responsibilities

• Translate Zero Trust analysis outputs into formal firewall and security rule requests.
• Submit detailed implementation requests to firewall teams with identities, destinations, addresses, services, ports, protocols, and app IDs.
• Ensure requests meet firewall standards and include required technical details.
• Act as liaison between Zero Trust, IAM, firewall engineering, and application teams.
• Track firewall requests from submission to completion.
• Resolve questions or discrepancies with firewall engineers.
• Validate that implemented rules match Zero Trust requirements.
• Perform post-implementation testing to confirm authorized access and blocked unauthorized access.
• Identify and remediate misconfigurations or policy drift.
• Ensure all rules are tagged, documented, and traceable to requirements.
• Maintain implementation records for audit and compliance.
• Support refinement of Zero Trust rules as access requirements evolve.

Skills

Enterprise firewall management

User-based firewall policies

Application aware firewall policies

Firewall rule requests

Troubleshooting access issues

Cross-team coordination

Job description

Job Title: Zero Trust Security Engineer

Location: Vienna, VA

Type: Contract

Compensation: 65-75/hr W2

Work Model: Hybrid – onsite and remote

Responsibilities

• Translate Zero Trust analysis outputs into formal firewall and security rule requests.
• Submit detailed implementation requests to firewall teams, including: source identities (users, groups, roles), destination applications, addresses, and services, required ports, protocols, and application IDs.
• Ensure requests meet firewall team standards and contain all required technical details.
• Act as the primary liaison between Zero Trust, IAM, firewall engineering, and application teams.
• Track firewall requests from submission through completion.
• Resolve implementation questions, clarifications, or discrepancies with firewall engineers.
• Validate that implemented firewall rules exactly match approved Zero Trust requirements.
• Perform post-implementation testing to confirm authorized access works as expected and unauthorized access is blocked.
• Identify and remediate misconfigurations, partial implementations, or policy drift.
• Ensure all implemented rules are properly tagged, documented, and traceable to application and Zero Trust requirements.
• Maintain implementation records for audit, compliance, and reporting.
• Support ongoing refinement of Zero Trust rules as application access requirements evolve.

Requirements

• Hands on experience working with enterprise firewalls (Palo Alto preferred).
• Strong understanding of user-based and application aware firewall policies.
• Experience submitting and managing firewall rule requests in enterprise environments.
• Ability to validate security rule implementations and troubleshoot access issues.
• Strong coordination and communication skills across technical teams.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M2

#LI-EL1

Ref: #851-Rockville-S1

System One, and its subsidiaries including Joulé, ALTA IT Services, CM Access, TPGS, and MOUNTAIN, LTD., are leaders in delivering workforce solutions and integrated services across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible full-time employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.