Top Secret Clearance)

ShorePoint•Washington, DC

23d•Onsite

About The Position

ShorePoint is seeking a Zero Trust Architect / Subject Matter Expert to provide strategic and technical leadership in designing, implementing, and optimizing Zero Trust security architectures across complex federal enterprise environments. The role translates mission requirements into secure, scalable, and policy-aligned solutions and supports senior technology and cybersecurity leadership in modernization across enterprise and mission systems. The architect serves as the Zero Trust Architecture subject matter expert, advising government leaders on strategy, implementation, and modernization. The role develops assessments, gap analyses, target architectures, roadmaps, and implementation plans; designs reference architectures across identity, device, network, workload, data, and application security; and supports integration with enterprise identity services, cloud platforms, endpoint security, microsegmentation, and network security solutions. The position collaborates with cybersecurity engineers, cloud architects, system integrators, mission partners, and government stakeholders. It conducts risk assessments and threat modeling, provides guidance on applicable federal and classified-environment standards, produces technical documentation and briefings, and ensures design and implementation work complies with security, classification, and data protection policies. The position is onsite in Washington, DC.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related technical discipline; equivalent experience may be considered.
15 or more years of relevant experience with a bachelor’s degree, 10 or more years with a master’s degree, or 6 or more years with a PhD.
Demonstrated experience designing and implementing Zero Trust security architectures in federal environments.
Knowledge of federal Zero Trust requirements, including NIST SP 800-207, OMB Memorandum M-22-09, and Executive Order 14028.
Experience with IAM modernization, PKI, identity federation, and MFA solutions.
Experience with microsegmentation, software-defined perimeter solutions, or network segmentation architectures.
Experience integrating Zero Trust concepts in hybrid or multi-cloud environments, including AWS, Microsoft Azure, GCP, and GovCloud.
Working knowledge of enterprise security tools, including SIEM, SOAR, EDR, UEBA, and data security platforms.
Ability to develop architectural diagrams, technical documentation, and implementation plans.
Experience conducting cybersecurity gap analyses, risk assessments, and system evaluations.
Strong communication, presentation, and stakeholder engagement skills.
Ability to work independently as an SME while collaborating across multidisciplinary teams.
Ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
Must hold and maintain an active DOE Q or equivalent DoD Top Secret clearance and be eligible to obtain and maintain an SCI clearance, in compliance with federal contract requirements.

Nice To Haves

Prior experience supporting the Intelligence Community, Department of Energy, or other classified U.S. Government mission environments.
Experience implementing Zero Trust in high-security environments, including IC directories, enclave architectures, or cross-domain systems.
Experience with ABAC, PDP/PEP architecture, and enterprise authorization frameworks.
Experience with DOE or IC cybersecurity directives, enterprise architecture, or compliance frameworks.
Experience supporting enterprise cybersecurity modernization, Continuous Diagnostics and Mitigation, or federal compliance initiatives.
Experience implementing Zero Trust for Operational Technology, SCADA, or industrial control systems.
Experience with advanced cybersecurity analytics, automated policy enforcement, or AI-enabled threat detection.
Familiarity with DevSecOps, container security, or microservices architectures.

Responsibilities

Serve as the Zero Trust Architecture subject matter expert and advise government leadership, including the CTO and DOCO, on strategy, implementation, and modernization pathways.
Develop current-state assessments, gap analyses, and target-state Zero Trust architectures aligned with federal cybersecurity requirements.
Translate mission, operational, and security requirements into actionable Zero Trust technical solutions and system designs.
Design and document reference architectures for identity, device, network, workload, data, and application security pillars.
Evaluate security controls, data flows, authentication and authorization mechanisms, and boundary protections to identify Zero Trust integration opportunities.
Lead development of Zero Trust roadmaps, implementation plans, sequencing strategies, and technical transition approaches.
Support integration of Zero Trust capabilities with enterprise identity services, cloud platforms, endpoint security, microsegmentation tools, and network security solutions.
Collaborate with cybersecurity engineers, cloud architects, system integrators, and mission partners to implement Zero Trust controls across diverse environments.
Conduct risk assessments, threat modeling, and impact analyses to support design decisions.
Recommend technical solutions to strengthen authentication, authorization, continuous monitoring, and access control.
Participate in technical working groups, design reviews, and cross-agency coordination forums focused on Zero Trust execution.
Provide guidance on Zero Trust standards, including NIST 800-207, CNSSI policies, and applicable DoD and IC directives.
Support interoperability and compliance across hybrid, on-premises, and multi-cloud architectures.
Develop reusable templates, frameworks, and implementation methodologies for enterprise-wide Zero Trust adoption.
Produce technical documentation, architectural diagrams, design artifacts, and briefing materials for government leadership.
Ensure design and implementation activities comply with security, classification, and data protection policies.
Collaborate with peers across the Department’s national plants and laboratories to support Zero Trust Architecture outcomes.