Zero Trust Infrastructure Engineer

Job description

You'll work closely with architects, cybersecurity teams, network engineers, and application teams to make sure our enterprise environment meets Zero Trust maturity goals and follows DoD Zero Trust strategy and implementation guidance. This position is fully remote.

### What You'll Be Doing

• Implementing Zero Trust Policy Enforcement Points (PEPs) across network, device, and application layers
• Configuring microsegmentation policies, identity-based routing, and dynamic access controls
• Supporting Zero Trust automation workflows, including policy-as-code and continuous verification mechanisms
• Integrating telemetry feeds from applications, identity services, cloud platforms, and network sensors into enforcement logic
• Applying Zero Trust principles to cloud network segmentation, traffic inspection, and resource access
• Supporting the implementation of device posture checks, endpoint trust validation, and conditional access rules
• Assisting in the development and enforcement of Zero Trust security policies aligned with DoD guidance
• Troubleshooting enforcement issues, telemetry gaps, and policy misconfigurations
• Participating in Zero Trust maturity assessments, roadmap updates, and implementation planning
• Maintaining Zero Trust infrastructure documentation, diagrams, and policy mappings
• Collaborating with cybersecurity teams to align Zero Trust enforcement with RMF controls and IL5 cloud requirements
• Supporting monitoring, logging, and analytics for Zero Trust events and enforcement decisions

### What We're Looking For

**Clearance Requirement:** You must hold an active Top Secret clearance, supported by a Tier 5 background investigation.

**Education:** A Bachelor’s degree in Cybersecurity, Computer Science, Information Technology Engineering, or a related field is required.

**Experience:** You'll need a minimum of **7 years** in IT infrastructure, cloud security, or network security engineering. We're also looking for experience implementing Zero Trust or identity-based security controls, working with microsegmentation, PEP configuration, or conditional access, and supporting IL5 cloud or federal security environments.

**Technical Knowledge (Required):**

• Knowledge of Zero Trust principles, DoD Zero Trust strategy, and enforcement mechanisms
• Familiarity with identity-based routing, access policies, and device posture enforcement
• Understanding of cloud networking (AWS GovCloud is preferred), segmentation, and traffic inspection
• Familiarity with telemetry, logging, and distributed monitoring systems

**Technical Knowledge (Preferred):**

• Experience with policy-as-code frameworks or Zero Trust automation tools
• Experience with SIEM platforms, identity platforms, and cloud-native enforcement services
• Experience with microservices or container-based traffic enforcement

**Certifications:**

• Required: CompTIA Security+
• Preferred: ITIL v4 Foundation, CCSP, CISSP, or Zero Trust-focused certifications, and AWS security or networking certifications

**Skills:**

• Strong analytical and troubleshooting skills for complex Zero Trust enforcement issues
• Excellent communication and collaboration abilities across technical and mission teams
• High attention to detail, especially in policy tuning and enforcement logic
• Ability to work in fast-paced, mission-critical environments
• Strong documentation discipline and ability to translate complex configurations into clear guidance