Senior Zero Trust Engineer (Data Pillar SME)

PMO Integration & Project Support

• Technical Advisor: Serve as the PMO’s dedicated Data Pillar SME, tracking modernization activities alongside the ZTA Project Manager.
• Technical Translation: Convert complex engineering findings, system designs, and vendor capabilities into PMO deliverables (e.g., project plans, milestones, dependencies, risk registers).
• Governance & Briefings: Support PMO governance, sprint planning, and workstream prioritization; provide technical insights during leadership briefings and vendor reviews.

Implementation Gap Analysis & Advisory (Core Function)

• Assess ZTMM v2.0 Core Functions: Lead comprehensive Zero Trust gap analyses across agency data repositories, cloud environments, and on-premises infrastructure.
• Evaluate Data Capabilities: Measure current maturity against CISA ZTMM v2.0 Data functions, advising on:
• Data Inventory Management: Methods to discover, track, and record organizational data assets.
• Data Categorization & Access: Strategies for sensitivity classification, tagging, and granular least-privilege permissions.
• Data Encryption & Availability: Cryptographic controls (rest/transit/use) and resilient data redundancy workflows.
• Information Protection: Frameworks to monitor, prevent, and mitigate data leaks or unauthorized exfiltration.
• Assess Cross-Cutting Integration: Coordinate how Data controls integrate with Visibility & Analytics (SIEM/SOAR logs), Automation & Orchestration (automated labeling/enforcement), and Governance (data policies/compliance reports).
• Roadmaps & Design Review: Formulate transition pathways to advance the agency from “Traditional” toward the “Optimal” CISA ZTMM maturity state; review implementation team designs for NIST SP 800-207 compliance.

Stakeholder Coordination & Process Modernization

• Cross-Team Collaboration: Act as the primary liaison for the Data pillar between the ZTA PMO, cyber engineering teams, data governance bodies, and operations units.
• Process Modernization: Identify outdated data workflows and facilitate technical working groups to resolve cross-pillar engineering dependencies (e.g., Data controls integrated with Identity and Device pillars).

This is an advisory and coordination role; it does not require direct technical tool implementation, coding, or system configuration. The ideal candidate will possess deep expertise in federal mandates (OMB M-22-09, CISA ZTMM v2.0, NIST SP 800-207/207A) to guide gap analysis, transition roadmaps, and stakeholder alignment., * Overall Experience: 10+ years of professional experience in IT engineering, enterprise architecture, or federal IT consulting.

• Cybersecurity Focus: 6+ years of dedicated experience in cybersecurity engineering, data protection, or cyber risk advisory.
• Advisory & Frameworks: Proven senior advisory experience within an Enterprise PMO, aligning agency strategies with OMB M-22-09, CISA ZTMM v2.0, and NIST SP 800-207.
• Federal Compliance: Strong understanding of FedRAMP cloud security requirements and FISMA risk management frameworks impacting enterprise data governance.
• Education: Bachelor’s degree in Cybersecurity, IT, Computer Science, Data Management, or a related field (master’s preferred).
• Clearance: Ability to obtain and maintain a Federal Public Trust clearance (Active clearance preferred).

Technical & Soft Skills

• Data Protection Concepts: Deep conceptual understanding of DLP, Data Classification/Labeling, EDRM, data encryption standards, and architectural integration with Identity (ICAM), Device, and Network pillars.
• Project Facilitation: Strong experience in PMO environments using Agile/Scrum; working knowledge of MS Office Suite and ServiceNow for tracking tasks and documentation.
• Communication: Exceptional ability to translate highly technical engineering jargon into clear business risk and project concepts for non-technical PMs and executives.