Zero Trust Architecture Engineer

Overview

Apogee Engineering has a new exciting opportunity for a Zero Trust Architecture Engineer that supports the design and implementation of Zero Trust Architecture for NASIC environments. Develops ZTA governance, standards, and technical guardrails to secure mission data and services across multiple domains.

****Contingent Upon Contract Award****

Responsibilities

• Assist in developing ZTA frameworks, governance models, and technical standards tailored to NASIC architectures.
• Experience software as a service (SaaS), authentication / identity management software, and RBAC / ABAC familiarity.
• Translate DoD, AF, and IC security policy into practical ZTA controls and patterns.
• Analyze existing architectures and recommend ZTA-compliant enhancements and mitigations.
• Coordinate with stakeholders and system owners to align ZTA designs with enterprise security processes.
• Contribute to implementation plans and configuration baselines for ZTA-related capabilities.
• Prepare the monthly ZTA Posture Report documenting transition status, issues, and recommended actions.

Qualifications

Minimum Experience:

Citizenship: Must be a US citizen Clearance: Ability to obtain and maintain a TS/SCI security clearance.

Certifications: CISSP or DoD 8140, CCZT Cloud Zero Trust or equivalent type certifications.Education / Years of Experience

• 8+ years experience with a minimum of three (3) years of experience in cybersecurity, information assurance, or security architecture.

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or related field; OR- six (6) additional years of work experience may be substituted for a Bachelor’s degree; OR- four (4) additional years of work experience plus an Associate’s degree may be substituted for a Bachelor’s degree.

Preferred Qualifications:

• Experience supporting security architectures in cloud or hybrid environments.
• Policy-as-code (PaC) and familiarity with open policy agent (OPA), Rego (preferred) / AWS Cedar / XACML 
• Relevant security certifications (e.g., CISSP, CASP+, CCSP, or equivalent).
• Experience with IC or DoD intelligence systems and multi-domain environments.

Additional InformationLocation: Wright Patterson AFB Dayton, OHOn-site/Hybrid/Remote: On-siteTravel: Occasional