Zero Trust Architect

Zero Trust Architect

Location: Bethesda, MD (Hybrid; On-site as Required)

Clearance: Tier 2 Public Trust (Required)

Employment Type: Full-Time

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Zero Trust Architect to support a Federal information security program. The Zero Trust Architect is responsible for designing, implementing, and maturing enterprise Zero Trust Architecture (ZTA) strategies that strengthen organizational cybersecurity through identity-centric, risk-based security principles.

This position provides technical leadership for Zero Trust initiatives across identity, devices, networks, applications, workloads, data, automation, and visibility. The Zero Trust Architect collaborates with Security Architects, Cloud Engineers, Security Engineers, ISSOs, Network Engineers, System Owners, and program leadership to integrate Zero Trust principles into enterprise technology modernization efforts.

The successful candidate will possess extensive experience implementing Zero Trust concepts, cloud security architectures, identity governance, and modern cybersecurity technologies that align with Federal cybersecurity guidance and industry best practices.

Essential Duties and Responsibilities:

Zero Trust Strategy

• Develop and maintain enterprise Zero Trust Architecture roadmaps.
• Design security architectures based on Zero Trust principles.
• Assess existing environments and identify opportunities to improve Zero Trust maturity.
• Recommend phased implementation strategies that minimize operational disruption.
• Align Zero Trust initiatives with organizational business and mission objectives.
• Support long-term cybersecurity modernization efforts.

Enterprise Architecture

• Design secure enterprise architectures that integrate identity, devices, networks, applications, and data protection.
• Develop reference architectures and technical standards supporting Zero Trust implementation.
• Review proposed technologies for architectural alignment.
• Identify architectural risks and recommend mitigation strategies.
• Support secure integration across cloud, hybrid, and on-premises environments.
• Ensure security is incorporated throughout the system development lifecycle.

Identity and Access Management

• Design enterprise Identity and Access Management (IAM) architectures.
• Implement least-privilege and just-in-time access models.
• Support deployment of Multi-Factor Authentication (MFA), Conditional Access, Privileged Identity Management (PIM), and Privileged Access Management (PAM).
• Develop identity governance strategies.
• Support continuous identity verification and adaptive access controls.
• Recommend improvements to authentication and authorization processes.

Network and Micro-Segmentation

• Design secure network segmentation strategies.
• Implement policy-based access controls.
• Recommend micro-segmentation solutions that limit lateral movement.
• Evaluate secure remote access technologies.
• Support software-defined perimeter (SDP) and Zero Trust Network Access (ZTNA) initiatives.
• Review network architectures for Zero Trust compliance.

Cloud and Data Security

• Design secure cloud architectures supporting Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid environments.
• Implement cloud-native Zero Trust capabilities.
• Develop data protection strategies utilizing encryption, data classification, and data loss prevention (DLP).
• Recommend secure workload protection mechanisms.
• Evaluate cloud security posture and identify opportunities for improvement.
• Support secure cloud modernization initiatives.

Security Technologies

Design and integrate enterprise security technologies including:

• Microsoft Entra ID
• Microsoft Defender XDR
• Microsoft Defender for Cloud
• Microsoft Sentinel
• Microsoft Intune
• Azure Policy
• Microsoft Purview
• Conditional Access
• Privileged Identity Management (PIM)
• Privileged Access Management (PAM)
• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR)
• Extended Detection and Response (XDR)
• Zero Trust Network Access (ZTNA)

Evaluate new technologies supporting Zero Trust maturity.

Risk Management Framework (RMF) Support

• Support implementation of NIST SP 800-53 security controls.
• Review system architectures supporting Authorization to Operate (ATO) activities.
• Assist ISSOs and Security Assessors during architecture reviews.
• Recommend technical solutions supporting continuous monitoring.
• Evaluate architectural risks identified during security assessments.
• Support development of architecture documentation associated with RMF activities.

Documentation and Reporting

Develop and maintain:

• Zero Trust Roadmaps
• Enterprise Security Architectures
• Reference Architectures
• Technical Design Documents
• Security Architecture Diagrams
• Technology Standards
• Implementation Guides
• Executive Briefings
• Maturity Assessments
• Architecture Decision Records (ADRs)

Ensure documentation remains current, technically accurate, and aligned with organizational standards.

Collaboration

• Coordinate with Security Architects, Security Engineers, Cloud Engineers, ISSOs, Network Engineers, System Owners, Enterprise Architects, Project Managers, and Government stakeholders.
• Participate in architecture review boards and technical working groups.
• Provide technical leadership during modernization initiatives.
• Present Zero Trust strategies and recommendations to technical and executive leadership.
• Mentor engineering teams on Zero Trust implementation principles.

Continuous Improvement

• Monitor emerging Zero Trust technologies, Federal cybersecurity guidance, and industry best practices.
• Recommend improvements to enterprise architecture and security engineering processes.
• Support automation initiatives that improve security operations and policy enforcement.
• Evaluate evolving Zero Trust capabilities and implementation approaches.
• Maintain professional certifications and advanced technical expertise.

Minimum Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.
• Minimum eight (8) years of experience designing enterprise cybersecurity architectures.
• Minimum three (3) years of experience designing or implementing Zero Trust Architecture initiatives.
• Experience implementing Identity and Access Management (IAM), cloud security, and enterprise security architecture.
• Experience supporting the NIST Risk Management Framework (RMF) and NIST SP 800-53 security controls.
• Strong analytical, documentation, presentation, and communication skills.
• U.S. Citizenship required.
• Ability to obtain and maintain a Tier 2 Public Trust.

Preferred Qualifications

• Master's degree in Cybersecurity, Computer Science, Information Assurance, Engineering, or a related discipline.
• Experience supporting a Federal civilian agency.
• Experience implementing Microsoft security technologies within enterprise environments.
• Experience designing cloud security architectures for Microsoft Azure and AWS.
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• TOGAF Certification (preferred)
• SABSA Chartered Security Architect (preferred)

Knowledge, Skills, and Abilities

• Zero Trust Architecture (ZTA)
• Identity and Access Management (IAM)
• Microsoft Entra ID
• Conditional Access
• Multi-Factor Authentication (MFA)
• Privileged Identity Management (PIM)
• Privileged Access Management (PAM)
• Zero Trust Network Access (ZTNA)
• Micro-Segmentation
• Microsoft Defender XDR
• Microsoft Defender for Cloud
• Microsoft Sentinel
• Microsoft Intune
• Microsoft Purview
• Microsoft Azure
• Microsoft 365 Security
• Amazon Web Services (AWS)
• Security Information and Event Management (SIEM)
• Endpoint Detection and Response (EDR)
• Extended Detection and Response (XDR)
• NIST Risk Management Framework (RMF)
• NIST SP 800-53
• NIST SP 800-207
• CISA Zero Trust Maturity Model
• Federal Information Security Modernization Act (FISMA)
• Enterprise Security Architecture
• Technical Documentation
• Microsoft Office Suite
• Microsoft Visio
• ServiceNow
• Jira

Security Requirements

• Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.
• Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.
• Ability to support enterprise cybersecurity modernization initiatives, architecture reviews, continuity of operations (COOP), emergency response activities, and surge support as required.
• Must maintain strict confidentiality while handling enterprise architecture documentation, security designs, implementation roadmaps, and Federal information systems.
• Ability to design and implement enterprise Zero Trust Architecture while collaborating with Government stakeholders, technical teams, and program leadership to improve cyber resilience, reduce organizational risk, and strengthen the security of enterprise information systems through modern, identity-centric security principles.