Senior Zero Trust Architect/ Engineer at ASRC Federal

Position Summary Senior Zero Trust Architect / Engineer responsible for designing, implementing, and maturing enterprise Zero Trust Architecture (ZTA) supporting Department of War missions. This role focuses on identity‑centric, data‑focused security solutions in Impact Level 5 environments. Responsibilities Zero Trust Architecture and Design: Design scalable Zero Trust solutions aligned with DoW strategies and NIST SP 800-207. Manage transition roadmaps from legacy architectures to ZTA, ensuring IL5 compliance and reference architecture alignment. Identity, Credential, and Access Management (ICAM): Architect and integrate ICAM solutions, enforce continuous authentication, RBAC/ABAC policies, MFA and conditional access. Network and Infrastructure Security: Create micro‑segmentation strategies, design and deploy Software‑Defined Perimeters and Secure Access Service Edge, secure multi‑cloud and hybrid environments. Data Security and Governance: Implement data‑centric controls: discovery, tagging, encryption at rest and in transit, and access policies following a "never trust, always verify" principle. Visibility, Analytics, and Automation: Integrate telemetry with SIEM, develop automated threat response, continuous risk scoring, and close visibility gaps with SOC teams. Collaboration and Compliance: Work with engineering teams to integrate applications, provide expert guidance on Zero Trust principles, and ensure RMF and DISA STIG compliance. Continuous Improvement: Stay current with Zero Trust technologies, policies, and adversary tactics; evaluate new solutions; document standards and best practices. Qualifications Bachelor’s degree with 10+ years of experience in cybersecurity architecture, network engineering, or enterprise IT security (or equivalent). Deep understanding of DoW/DoD Zero Trust Strategy, NIST SP 800-207, and CISA Zero Trust Maturity Model. Active Top-Secret clearance required; eligible for TS/SCI upgrade. Must meet 8570 IASAE III certification requirements at hire (e.g., CISSP-ISSAP, CISSP-ISSEP). Desirable: Degrees in Cybersecurity, Computer Science, Information Systems. Desirable: Cloud architecture certifications (AWS Certified Security Specialty, Microsoft Cybersecurity Architect Expert) or enterprise Zero Trust vendor certifications. Work Environment This is primarily a telework position with a requirement to be onsite up to three days per week at Quantico Marine Corps Base, VA. Reliable internet connectivity and mobile communication are essential. Benefits Competitive pay and benefits packages including health care, dental, vision, life insurance, 401(k) with employer match, education assistance, paid time off, holidays, and other leave required by law. EEO Statement ASRC Federal and its subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identity, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law. #J-18808-Ljbffr ASRC Federal