Cybersecurity Engineer

Description:

In this role, you will help plan, implement, and track Zero Trust Architecture goals and objectives of our customer. The ideal candidate will work collaboratively with our team and customer to help assess As-Is Zero Trust efforts to achieve both 2027 targets as well as set the team on the path to success for 2032 Advanced requirements. This job will require you to become the resident expert in one of the seven pillars and help guide the team to the solutions that ensure mission success while making it the number one priority to protect our data, systems, and personnel.

Closely collaborating with customers (both executive and technical audiences), our company, and our partners to

 Perform Zero Trust security readiness assessments (e.g. gap analyses, maturity assessments)
 Develop Zero Trust implementation roadmaps
 Design and implement technical Zero Trust security solutions
 Provide customer advice on and help lead policy, governance, process, workflow, and organizational change
 Work to infuse Zero Trust design principles across all pillars in a Zero Trust model (e.g. Users, Devices, Networks, Applications, Data, etc.)
 Lead enterprise-wide, end-to-end Zero Trust architecture projects involving cutting edge technologies and concepts, such as SD-WAN, SASE, edge computing, cloud technologies, enterprise identity, microservices, containers, encryption, tokenization, AI, ML, SIEM, SOAR, UEBA, threat modeling, etc.
 Coordinate with appropriate organizational stakeholders to ensure Zero Trust is implemented, end-to-end across customer environments
 Develop innovative approaches and create efficiencies to our existing practices
 Work across government and industry to evaluate and shape policy around Zero Trust and related topics
 Stay abreast of federal and commercial best practices, implementations, and solutions to infuse into our client environments
 Articulate security concerns and risks related to currently implemented or planned solutions and develop remediation or mitigation plans
 Map government/customer requirements and security control frameworks (e.g. NIST, DISA, OMB, etc.) to designed technical controls
 Assist in the continued documentation of the current enterprise ZT program to Zero Trust 152 activities
 Apply professional-level functional knowledge to solve problems requiring the identification and analysis of moderately complex issues
 Serve in a supporting role to the Pillar Leads and responsible for leading the effort to organize the execution of blueprint by influencing and building the appropriate coalitions across multiple departments and disciplines and serve as a Subject Manager Expert in the respective domain area
 Drive the development of the technology strategy and roadmap towards a Zero Trust paradigm including integration with Identity and Access Management (IAM), Data Security, Endpoint Security, Policy, and Trust engines, providing recommendations and solutions with full understanding of cross-organizational impact and needs
 Utilize threat modeling techniques to develop Zero Trust controls to be applied to architecture, data, network, and applications
 Partner with IT organization to shift the access and authentication paradigm across the Enterprise to Zero Trust and reduce risk to include insider threat
 Work with or establish teams within the architecture supporting policies and standards and provide in-depth knowledge and guidelines driving towards a Zero Trust solution
 Mentor systems engineering and architects on cyber architecture and engineering design to create zero trust architectures and solutions
 Proactively accumulate and maintain knowledge of current and merging/evolving technologies, concepts, and trends
 Must have the ability to communicate accurate information

Technologies used

Zero Trust, Palo Alto, Juniper, Splunk ,ELK, Sparx, Cisco ISE, Tanium, AWS, Azure, MDE

Required

 Minimum of a Bachelor of Science in one of the following computer engineering, computer science, IT, cyber security, or a related field.
 Relevant years of experience may be used in substitution for situations where the candidate does not have a BS degree
 IA III certification (e.g. CISSP, CISM, or equivalent)
 Active Secret Clearance
 Minimum of 4 years of experience in network solutions architecture, engineering, implementation, integrations, and operations of enterprise and/or carrier-class networks.
 Experience working with cloud-based network infrastructures such as AWS or Azure or GCP or Oracle Cloud.
 Hands on experience with common, enterprise grade network security & SIEM technologies (such as Zscaler, Palo Alto, Cisco, Juniper, Microsoft, Splunk, ELK etc.).
 Familiarity with the NIST 800, FedRAMP, Risk Management Framework, Security Controls, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines.
 Ability to work and clearly communicate with all levels of management and staff
 Excellent interpersonal, verbal, and written communication skills
 Excellent collaboration and partnership skills across teams, customer service skills and interaction
 Experience with Zero Trust Architectures (ZTA)
 Experience with enterprise and security architecture
 Demonstrate problem solving, analytical and process development skills
 Must be a team player with a cooperative and energetic spirit with a willingness to learn
 Extraordinary attention to detail, organizational and cross-functional communication skills to collaborate on Zero Trust with existing identity and data implementations
 Ability to work independently and in a team environment