> Markdown version of [/jobs/ext/1481425-zero-trust-infrastructure-engineer](https://www.wearedevelopers.com/jobs/ext/1481425-zero-trust-infrastructure-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Zero Trust Infrastructure Engineer - **Company:** DecisionPoint Corporation - **Location:** Reston, VA, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Application Layers, Cloud Computing, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Cyber Security, Information Engineering, Monitoring of Systems, Identity and Access Management, Network Security, Routing, Zero Trust Network Access, Security Information and Event Management, Policy as Code, Data Logging, Cloud-native Network Functions (CNF), Information Technology, Microservices - **Published:** July 29, 2026 - **Apply:** https://diversityjobs.com/main/sendform/8/8/28176/1/15048958?backUrl=%2Fcareer%2F15048958%2FZero-Trust-Infrastructure-Engineer-Virginia-Reston ## About the Role Bachelor's degree in Cybersecurity, Computer Science, Information Technology Engineering, or a related field. Experience (Required) * Minimum 7 years of experience in IT infrastructure, cloud security, or network security engineering. * Experience implementing Zero Trust or identity-based security controls. * Experience with microsegmentation, PEP configuration, or conditional access. * Experience supporting IL5 cloud or federal security environments. Technical Knowledge (Required) * Knowledge of Zero Trust principles, DoD Zero Trust strategy, and enforcement mechanisms. * Familiarity with identity-based routing, access policies, and device posture enforcement. * Understanding of cloud networking (AWS GovCloud preferred), segmentation, and traffic inspection. * Familiarity with telemetry, logging, and distributed monitoring systems. Technical Knowledge (Preferred) * Experience with policy-as-code frameworks or Zero Trust automation tools. * Experience with SIEM platforms, identity platforms, and cloud-native enforcement services. * Experience with microservices or container-based traffic enforcement. Certifications Required: * CompTIA Security+ Preferred: * ITIL v4 Foundation * CCSP, CISSP, or Zero Trust-focused certifications * AWS security or networking certifications Skills * Strong analytical and troubleshooting skills for complex Zero Trust enforcement issues. * Excellent communication and collaboration abilities across technical and mission teams. * High attention to detail, especially in policy tuning and enforcement logic. * Ability to work in fast-paced, mission-critical environments. * Strong documentation discipline and ability to translate complex configurations into clear guidance. ## Description The Zero Trust Infrastructure Engineer collaborates with architects, cybersecurity teams, network engineers, and application teams to ensure the enterprise environment meets Zero Trust maturity goals and adheres to DoD Zero Trust strategy and implementation guidance., The Zero Trust Infrastructure Engineer will: Implement Zero Trust Policy Enforcement Points (PEPs) across network, device, and application layers. * Configure microsegmentation policies, identity-based routing, and dynamic access controls. * Support Zero Trust automation workflows, including policy-as-code and continuous verification mechanisms. * Integrate telemetry feeds from applications, identity services, cloud platforms, and network sensors into enforcement logic. * Apply Zero Trust principles to cloud network segmentation, traffic inspection, and resource access. * Support the implementation of device posture checks, endpoint trust validation, and conditional access rules. * Assist in the development and enforcement of Zero Trust security policies aligned with DoD guidance. * Troubleshoot enforcement issues, telemetry gaps, and policy misconfigurations. * Participate in Zero Trust maturity assessments, roadmap updates, and implementation planning. * Maintain Zero Trust infrastructure documentation, diagrams, and policy mappings. * Collaborate with cybersecurity teams to align Zero Trust enforcement with RMF controls and IL5 cloud requirements. * Support monitoring, logging, and analytics for Zero Trust events and enforcement decisions. ## Related Videos - [Creating a routing app with Google Maps API from scratch](https://www.wearedevelopers.com/videos/831-creating-a-routing-app-with-google-maps-api-from-scratch) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Microservices: how to get started with Spring Boot and Kubernetes](https://www.wearedevelopers.com/videos/242-microservices-how-to-get-started-with-spring-boot-and-kubernetes) - [Trust Issues: Because Zero-Trust Isn’t Optional Anymore](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) - [A Technical Introduction to Bitcoin's 2nd Layer- The Lightning Network](https://www.wearedevelopers.com/videos/15-a-technical-introduction-to-bitcoin-s-2nd-layer-the-lightning-network) - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)