Zero Trust Security Engineer

We are seeking a Zero Trust Architect / Security Engineer to support a federal cybersecurity modernization initiative focused on the implementation and maturation of a comprehensive Zero Trust Architecture (ZTA) program. This individual will lead strategy, architecture, engineering, and deployment efforts across identity, endpoint, data, application, and security operations domains while leveraging leading Microsoft and enterprise security platforms. The role combines high-level architectural leadership with hands-on engineering responsibilities and requires close collaboration with executive stakeholders, project teams, and security operations personnel., * Lead the design, planning, and execution of a multi-phased Zero Trust Architecture roadmap aligned to federal cybersecurity requirements.

• Design, engineer, and implement secure architectures across all Zero Trust pillars using Microsoft security technologies including Entra ID, Defender XDR, Sentinel, Purview, and Intune.
• Develop technical strategies that integrate Microsoft security solutions with enterprise platforms such as Okta, Splunk, CyberArk PAM, and Veracode.
• Implement identity governance, privileged access management, endpoint protection, monitoring, security analytics, and data protection controls.
• Configure and maintain security monitoring, detection, and response capabilities using SIEM and XDR technologies.
• Deploy and manage data protection and data loss prevention capabilities in support of organizational security objectives.
• Ensure all solutions adhere to NIST SP 800-207, NIST SP 800-53 Rev. 5, RMF, and applicable federal security mandates.
• Translate technical requirements into actionable implementation plans and security recommendations for leadership and stakeholders.
• Provide technical leadership and mentorship to engineering teams to ensure successful execution of Zero Trust initiatives.
• Collaborate with both technical and non-technical stakeholders and communicate project status, security metrics, and implementation progress.
• Support project planning, task management, and documentation activities utilizing Jira and Confluence.

• Experience designing and implementing enterprise Zero Trust Architecture solutions.
• Strong hands-on experience with Microsoft security technologies including Entra ID, Defender XDR, Sentinel, Purview, and Intune.
• Experience with Okta Identity Governance and Administration (IGA).
• Experience configuring and supporting Splunk security monitoring solutions.
• Experience with CyberArk Privileged Access Management (PAM).
• Knowledge of application security tools and practices, including Veracode.
• Strong understanding of NIST 800-207, NIST 800-53 Rev. 5, RMF, and federal cybersecurity frameworks.
• Ability to balance strategic architecture responsibilities with hands-on engineering execution.
• Strong communication and stakeholder management skills.