Zero-Trust Architecture Specialist

Markon•Bethesda, OH

2d•$180,000 - $210,000

About The Position

Markon is seeking a highly experienced Zero Trust Architecture (ZTA) Specialist to support a mission-critical customer in the Intelligence Community (IC). This position will play a pivotal role in defining, designing, and coordinating the transition of current architectures into zero trust-enabled environments across the enterprise and non-enterprise services/systems. The role requires an expert-level understanding of secure systems architecture, IC directives, and modern IT security paradigms.

Requirements

Active TS/SCI with a CI Polygraph is required.
15+ years of experience in systems engineering and architecture, particularly in IC and DoD-related environments.
Extensive knowledge of zero trust architecture, including National Security System (NSS) and DoD reference architectures.
Familiarity with IC directives, policies, and standards, such as EO 14028, NSM-8, ICD 503, NIST 800-53, CNSSI 1253, and related frameworks.
Demonstrated ability to integrate IT stack technologies across global enterprise cyber systems with an emphasis on secure implementations.
Deep expertise in secure cloud architecture and multi-cloud/multi-fabric landscapes (classified/unclassified environments).
Strong knowledge of identity, authentication, and authorization technologies and frameworks central to zero trust principles.
Proficiency in developing IT roadmaps and implementation plans for mission-critical systems.
Demonstrated ability to work across IT domains, bringing together architecture, security, and technical integration.
Proven ability to brief senior IC and DoD forums, providing clear and concise updates, risk assessments, and strategic guidance.
Experience partnering across IC stakeholders, fostering collaboration and alignment of technical and operational initiatives.

Nice To Haves

Proven experience working in classified environments and bridging the gap between enterprise and mission-specific IT landscapes.
Certifications in systems architecture and security, such as CISSP, CCSP, or AWS Certified Solutions Architect.
Knowledge of emerging trends and tools in zero trust architecture and secure systems development.

Responsibilities

Architectural Design and Strategy:
Document architectural rules and develop clear criteria for system and service compliance with zero trust principles.
Diagram interim and future state architectures, capturing transition paths from current architectures to zero trust-enabled environments.
Define and effectively communicate integration expectations for all IT services across evolving architectures.
Design Patterns and Standards Development:
Create and maintain design patterns to guide enterprise and non-enterprise systems in achieving compliance with zero trust specifications.
Align all work with IC protocols, directives, and initiatives, ensuring consistency with broader government mandates.
IT Roadmap and Implementation Planning:
Develop and refine roadmaps for IT implementation of zero trust across global enterprises, including classified and unclassified multi-cloud/multi-fabric landscapes.
Integrate IT stack technologies, ensuring secure, scalable, and effective functionality within a global operational environment.
Zero Trust Expertise and Governance:
Apply expert knowledge in identity, authentication, and authorization technologies to advance zero trust principles.
Work with secure cloud architectures across multiple vendors and cloud fabrics, ensuring environments meet compliance and operational requirements.
Stakeholder Communication and Leadership:
Engage with senior stakeholders across the IC and DoD to communicate architectural decisions, integration plans, and compliance mandates.
Brief senior forums and provide subject matter expertise on EO 14028, NSM-8, NIST standards (e.g., 800-53, CNSSI 1253, ICD 503), and other related directives.
Build trust and foster collaboration across IC partners and technical teams to align zero trust implementations with mission objectives.
Generalist vs. Specialist Considerations:
The customer prefers a generalist with broad expertise across ZTA and related areas but is willing to recruit a specialist who can bring significant depth in one or more core areas, such as identity management, secure cloud architecture, or IT stack integration.