ZTNA/SASE Architect - Hybrid, Clearance Required

SOC LLC; Quantico (VA); Hybrid; USD 116,000 - 165,000; Full time

Job summary

SOC LLC is seeking a Senior Zero Trust Network Architect/Engineer in Quantico, VA,Hybrid work arrangement with on-site presence. You will serve as the chief technical authority for ZTNA and SASE design, governance, and long-term security boundaries across cloud, on-prem, and mobile endpoints.

Responsibilities include defining roadmaps and reference architectures, leading the deployment of GlobalProtect and Versa SASE, and integrating with IAM (Okta/Azure AD) for continuous authentication.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Engineering, Information Systems Management, or related field; Master's or equivalent military service plus 12+ years acceptable.
• Minimum 10 years in network security engineering, enterprise architecture, and infrastructure security.
• At least 3–4 years architecting Zero Trust (NIST SP 800-207) and SASE in enterprise or federal environments.
• Advanced knowledge of Palo Alto Networks with Panorama and GlobalProtect deployments.
• Deep experience with Versa Networks SASE (SD-WAN, SWG, CASB, FBaaS).
• Must meet 8140 cert requirements (e.g., CISM, CISSP-ISSAP, CISSP-ISSEP, GCIA, GDSA, GICSP)

Responsibilities

• Act as Principal Architect for the DCSA Zero Trust journey, defining roadmap, reference architectures, and engineering guidelines per NIST SP 800-207.
• Lead design, implementation, and optimization of Palo Alto GlobalProtect and Versa SASE for cloud, hybrid, and mobile endpoints.
• Define and govern security policy templates in Palo Alto Panorama to enforce micro-segmentation and threat prevention.
• Architect DLP, SSL/TLS decryption, and threat prevention across all ingress/egress points.
• Conduct architectural reviews of SASE/ZTNA configurations to identify bottlenecks and mitigate gaps.
• Collaborate with IAM to integrate ZTNA/SASE with Okta, Azure AD; evaluate device posture and continuous authentication.
• Guide integration of Versa SASE and Palo Alto with SOC environments (SIEM, SOAR, EDR/XDR).
• Provide tier-4 engineering leadership for complex architectural and access control challenges.

Skills

ZTNA

SASE

Security architecture

Threat prevention

Education

Bachelor's Degree in Cybersecurity

Master's degree or equivalent experience

Tools

Palo Alto Panorama

GlobalProtect

Versa SASE

SIEM

SOAR

EDR

XDR

Job description

SOC LLC is seeking a Senior Zero Trust Network Architect/Engineer in Quantico, VA,Hybrid work arrangement with on-site presence. You will serve as the chief technical authority for ZTNA and SASE design, governance, and long-term security boundaries across cloud, on-prem, and mobile endpoints.

Responsibilities include defining roadmaps and reference architectures, leading the deployment of GlobalProtect and Versa SASE, and integrating with IAM (Okta/Azure AD) for continuous authentication.