Zero Trust Engineer

Zero Trust Engineer (Senior)
Falls Church, Virginia • Full-time
IMPORTANT NOTICE: This position is contingent upon contract award.

Summary:

Senior Zero Trust Engineers lead design and implementation of Zero Trust security architectures aligned with DoD Zero Trust Strategy. This role designs identity-based access controls, micro-segmentation policies, continuous authentication mechanisms, and encrypted traffic management. Senior Engineers lead complex implementations, develop reference architectures, and provide technical leadership.

Key Responsibilities:

• Design comprehensive Zero Trust architectures including identity management, micro-segmentation, and continuous verification to address all seven pillars of DoD Zero Trust Architecture.
• Develop Software Defined Perimeter (SDP) solutions implementing perimeter-less security.
• Design network micro-segmentation strategies, dividing networks into 50-150 security zones.
• Lead 3-5 major Zero Trust projects annually (SDP deployment, PAM implementation, network segmentation).
• Develop and manage 200-500 identity-based access policies.
• Implement Privileged Access Management (PAM) solutions.
• Integrate 15-30 security tools with Zero Trust orchestration platforms.
• Develop Zero Trust architecture diagrams, policy documentation, and implementation guides.

Performance Metrics:

• Network Segments: 50-150 micro-segments with policy management.
• Access Policies: 200-500 identity-based policies managed.
• Users/Systems: 1,000-5,000 users and 500-2,000 systems under Zero Trust controls.
• Major Projects: 3-5 Zero Trust initiatives annually.
• Policy Updates: 50-100 modifications monthly.
• Tool Integrations: 15-30 security tools integrated.
• Documentation: 20-40 technical documents maintained.

Requirements:

• Clearance: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS) based on network assignment.
• Education: Bachelor's Degree in Information Technology, Cybersecurity, Computer Science, or related field.
• Experience: 10+ years network security and security architecture; 3+ years Zero Trust implementation.
• Certifications: CISSP required; CCSP, CISM, or security architecture certifications highly desired.
• Technical Knowledge: Expert knowledge of Zero Trust principles, DoD ZT Reference Architecture, IAM/PAM, network segmentation, Software Defined Perimeters.

About Advana:

Advana is the Department of Defense Chief Digital and Artificial Intelligence Office's (CDAO) enterprise-wide data, analytics, and AI platform. Advana provides DoD military and civilian decision makers with unprecedented access to enterprise data, tools, and capabilities in a secure environment. The platform hosts hundreds of curated applications across logistics, financial management, personnel, health, and other domains, accelerating decision advantage through accessible, actionable data and AI capabilities.

This position supports comprehensive cybersecurity operations for the Advana platform across three classified networks (NIPR, SIPR, JWICS).

Important Notes:

Position Status:

• This position is contingent upon contract award.
• Start date will be determined upon contract award.
• We will maintain contact with selected candidates throughout the award process.

Work Requirements:

• U.S. Citizen required.
• Clearance varies by network: Secret (NIPR), Top Secret (SIPR), or TS/SCI Eligible (JWICS).
• On-premises work required at Suffolk Building, Falls Church, VA.
• No remote work options available.
• Standard business hours with operational flexibility.

Benefits:

• 4 Weeks Paid Time Off.
• All Federal Holiday’s Paid Vacation.
• Four Percent Matching 401K.
• Full health/vision/dental benefits for the employee and family paid 100% by ZTI Solutions, LLC.

We thank all applicants for their interest. Only candidates selected for interviews will be contacted.

ZTI Solutions, LLC was founded in 1997 in Virginia and is classified as a small business. The company is owned and operated by its founder, Rudy Zadnik, who emphasizes moral and business excellence over increasing company profits. This results in a more customer-oriented attitude towards mission accomplishment, as opposed to growing profits or sales.Our approach to consulting and engineering centers around using only highly skilled personnel who are seasoned industry veterans. All employees hold high-level industry and vendor certifications. We offer a comprehensive set of consulting and staff augmentation services, primarily focused on networking and security consulting in the classified space.