> Markdown version of [/jobs/ext/2141426-zero-trust-enterprise-architect](https://www.wearedevelopers.com/jobs/ext/2141426-zero-trust-enterprise-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Zero Trust Enterprise Architect - **Company:** Leidos - **Location:** Stuttgart, Germany - **Salary:** €107,900.0 - €195,050.0 - **Contract:** Permanent contract - **Skills:** Adobe Analytics, Software System Penetration Testing, Computer Networks, Identity and Access Management, Networking Hardware, Virtual Private Networks (VPN), Information Systems Security Architecture Professional, Network Security, Network Segmentation, Role-Based Access Control, Zero Trust Network Access - **Published:** August 20, 2026 - **Apply:** https://www.careerjet.de/jobad/de8a48c69ee53476aaee942515daee6e3b ## About the Role · BA/BS + 8 years recent specialized or AA/AS + 10 years recent specialized or a major cert + 12 years recent specialized or 14 years of recent specialized experience · Hold a current Top Secret/SCI clearance. · Current DOD 8570 IAT 2 compliance. · The candidate must be experienced in overseeing the management and supervision of a minimum of 10 personnel. · Proven experience as a Zero Trust Architect or in a similar cybersecurity role. · In-depth knowledge of cybersecurity principles, protocols, and best practices. · Experience with identity and access management solutions, network security, and endpoint protection. · Familiarity with cybersecurity frameworks, compliance standards, and regulations. · Strong problem-solving and analytical skills. · Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Zero Trust Architect (CZTA) are a plus. · TESA eligibility ## Description Leidos Digital Modernization sector has an excellent opportunity for an experienced, self-directed, Zero Trust Architect. This position is in support of a Department of Defense (DoD) organization, USAFRICOM located OCONUS in Stuttgart, Germany. This position is required to travel OCONUS. Clearance Requirement: You must hold a current DoD Top Secret/SCI clearance to qualify and to be considered for this role. What will you do in this role? Zero Trust Architecture Design: · Lead the design and implementation of a Zero Trust security architecture for the organization. · Develop and implement strategies to ensure the least privilege access, micro-segmentation, and continuous monitoring of network traffic. · Collaborate with cross-functional teams to integrate Zero Trust principles into existing and new systems. Identity and Access Management: · Implement strong authentication and authorization mechanisms to verify user identities and ensure secure access. · Design and implement role-based access controls (RBAC) and implement identity and access management (IAM) solutions. · Monitor and audit user access to identify and mitigate potential security risks. Network Security: · Implement network segmentation and micro-segmentation strategies to limit lateral movement. · Design and deploy secure communication channels, including encryption and VPN solutions. · Collaborate with network engineers to ensure secure configuration and monitoring of network devices. Endpoint Security: · Design and implement endpoint protection strategies, including device posture assessment and continuous monitoring. · Implement application control and device authentication measures. · Work with IT teams to ensure security configurations on endpoints align with Zero Trust principles. · Security Monitoring and Incident Response: · Implement continuous monitoring solutions to detect and respond to security incidents. · Develop and document incident response plans for Zero Trust environments. · Conduct regular security assessments and penetration testing. These are the Required Qualifications ## Related Videos - [Small, Secure, Interconnected: The next Internet Protocol](https://www.wearedevelopers.com/videos/100062-small-secure-interconnected-the-next-internet-protocol) - [Trust Issues: Because Zero-Trust Isn’t Optional Anymore](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) - [Distributed search under the hood](https://www.wearedevelopers.com/videos/256-distributed-search-under-the-hood) - [3x Performance: A Humbling Journey](https://www.wearedevelopers.com/videos/100165-3x-performance-a-humbling-journey) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Demystifying application networking in the cloud](https://www.wearedevelopers.com/videos/675-demystifying-application-networking-in-the-cloud) ## Related Articles - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)