> Markdown version of [/jobs/ext/3070557-zero-trust-enterprise-security-architect](https://www.wearedevelopers.com/jobs/ext/3070557-zero-trust-enterprise-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Zero Trust / Enterprise Security Architect - **Company:** eTelligent Group LLC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $165,000.0 - $175,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Access, Java (Programming Language), Active Directory, Artificial Intelligence, Amazon Web Services, Microsoft Azure, Bioinformatics, Business Software, Cyber Security, Software Design Patterns, Linux, Enterprise Architecture Framework, Information Systems Security Architecture Professional, Laboratory Information Management Systems, PostgreSQL, Machine Learning, Microsoft Visio, Ping (Networking Utility), Azure Active Directory, Zero Trust Network Access, Sherwood Applied Business Security Architecture, Salesforce.Com, Security Information and Event Management, Data Logging, Data Classification, Okta, Office365, ReactJS, Fast Healthcare Interoperability Resources, Appian, Git, Togaf, Microsoft InTune, Azure Security Center, Forescout, Falcon Platform, AngularJS, Palo Alto Networks, Microsoft Sentinel, Wikis, Slurm, Api Gateway, Splunk, Servicenow - **Published:** September 25, 2026 - **Apply:** https://www.thejobnetwork.com/job/1a335aac-72a3-40ad-bfae-9d676a1033d3/senior-zero-trust-enterprise-security-architect ## About the Role Clearance: All staff must obtain NIH suitability and a PIV credential and be fluent in English. Anyone doing risk or vulnerability testing needs a current T2 (BI) or higher investigation., * Bachelor's degree plus 10+ years of security architecture experience. * Deep, practical knowledge of NIST SP 800-207/207A, the CISA ZTMM v2.0, OMB M-22-09, NIST SP 800-53 Rev 5, and NIST SP 800-63-4. * A track record of designing cloud and hybrid Zero Trust reference architectures for large, federated enterprises. * Strong written artifacts: architecture diagrams, decision records, and design patterns with control mappings. * Ability to obtain an NIH suitability determination and PIV credential; fluent in English., * CISSP, CISSP-ISSAP, SABSA, or TOGAF. * Experience with research, academic, health, or other decentralized IT environments (HPC, clinical, laboratory). * Familiarity with the CISA Zero Trust guidance for cloud, NSA Zero Trust guidance, TIC 3.0, and the HHS Federated EA Framework. * Vendor certifications (Microsoft, Zscaler, Palo Alto, Okta, AWS, Azure). * Current National Institutes of Health (NIH) or U.S. Department of Health and Human Services (HHS) experience is highly preferred. ## Description * Lead Task 2: define the NIH Future State ZTA across identity, device, network, application/workload, and data, with automation, orchestration, and continuous monitoring. * With OITA, ISAO, and CIT service owners, inventory every centrally provided capability: enterprise ICAM and PIV/derived credentials, endpoint management, segmentation and secure access, API gateways, data classification and encryption, and logging/SIEM. Build the ZTA Pillar Centrally Provided Services Matrix (Subtask 2.1, due at 120 days). * Author gold-standard reference architectures for cloud, on-premises, and hybrid environments (Subtask 2.2), broken down into NIST SP 800-207 Policy Engine, Policy Administrator, and Policy Enforcement Point components. * Tailor those architectures to NIH workload families: clinical systems (FHIR gateways, PostgreSQL, React), HPC and bioinformatics (Linux/Slurm, Nextflow, object storage), extramural grants (Appian/COTS, eRA integrations), IC business applications (Salesforce, ServiceNow, M365, Java/Angular), and laboratory/IoT instruments (Cryo-EM, mass spectrometry, LIMS). * Set per-pillar Advanced and Optimal targets against the CISA ZTMM v2.0 and build the risk-informed remediation roadmap. * Co-lead Task 3 AI use-case discovery with the AI/ML Solutions Architect. Contribute architecture criteria to the Task 4 ZTA Overlay and to the Task 7 architecture-review checkpoints. * Validate each pattern with at least one IC team before publication, and brief decisions to the Architecture Review Board and domain teams. * Maintain artifacts as Git-versioned architecture-as-code and publish them to the OCIO ZTA Wiki. Tools & Technology Environment: Identity (Microsoft Entra ID/Active Directory, Ping Identity, Okta, PIV/derived credentials); SSE/ZTNA (e.g., Zscaler, Palo Alto Prisma Access); microsegmentation; EDR/MDM (Microsoft Defender for Endpoint, Intune, CrowdStrike, Forescout); SIEM/SOAR (Splunk, Microsoft Sentinel); AWS and Azure; Git; Visio/draw.io. ## Related Videos - [Running Secure Life Science Research at Scale using Hybrid GPU HPC and Kubernetes 🧬](https://www.wearedevelopers.com/videos/100355-running-secure-life-science-research-at-scale-using-hybrid-gpu-hpc-and-kubernetes) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Trust Issues: Because Zero-Trust Isn’t Optional Anymore](https://www.wearedevelopers.com/videos/100089-trust-issues-because-zero-trust-isn-t-optional-anymore) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Stop Committing Your Secrets - GIt Hooks To The Rescue!](https://www.wearedevelopers.com/videos/573-stop-committing-your-secrets-git-hooks-to-the-rescue) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Trustworthy AI Starts at Deployment: 5 Checks Before You Ship](https://www.wearedevelopers.com/magazine/753-trustworthy-ai-starts-at-deployment-5-checks-before-you-ship) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)