Zero Trust Architecture (ZTA)

KBR•Beavercreek, OH

About The Position

KBR is seeking an experienced Zero Trust Architecture (ZTA) Architect/Engineer to support the design, development, implementation, and continuous improvement of Zero Trust Architecture frameworks. The role focuses on ensuring secure, identity-centric access to mission data and enterprise services and working closely with Air Force stakeholders to establish governance, technical standards, architectural guidance, and transition strategies aligned with Department of Defense cybersecurity objectives and mission requirements. The position supports Zero Trust initiatives across enterprise and mission systems, including assessing current architectures, defining transition roadmaps, developing architecture products and implementation guidance, and monitoring implementation progress. The role also provides subject matter expertise, facilitates technical and stakeholder engagements, and produces a Monthly ZTA Posture Report covering transition progress, standards compliance, risks and mitigations, recommended improvements, and adoption metrics. Candidates joining KBR's Mission Technology Solutions business before its planned spin-off will transition to Trinzic when the separation is complete and will not need to reapply.

Requirements

Master’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field.
At least 10 years of experience supporting cybersecurity architecture, enterprise architecture, or Zero Trust initiatives.
Experience designing and implementing enterprise security architectures within government or DoD environments.
Knowledge of Zero Trust Architecture principles, frameworks, and implementation methodologies.
Experience with identity, credential, and access management (ICAM) solutions.
Understanding of cloud security, network segmentation, endpoint security, and data-centric security models.
Experience developing governance frameworks, technical standards, and architectural guidance documentation.
Strong written and verbal communication skills and ability to present technical recommendations to senior leadership.
Ability to operate effectively in highly technical and mission-focused environments.
U.S. citizenship.
Active TS/SCI clearance.

Nice To Haves

Experience supporting U.S. Air Force, Department of Defense, or Intelligence Community programs.
Familiarity with the DoD Zero Trust Strategy and Reference Architecture.
Experience with enterprise architecture frameworks such as DoDAF, TOGAF, or similar.
Security certifications such as CISSP, CCSP, CISM, SABSA, or comparable credentials.
Knowledge of cloud platforms such as Azure, AWS, or GCC/DoD environments and Zero Trust security tools.

Responsibilities

Support the design, implementation, and maturation of Zero Trust Architecture frameworks across enterprise and mission systems.
Develop and recommend ZTA governance models, policies, and implementation strategies aligned with organizational objectives and cybersecurity requirements.
Establish and maintain technical standards, architectural patterns, and security guardrails supporting identity-centric security principles.
Collaborate with stakeholders to assess current-state architectures and develop transition roadmaps toward Zero Trust adoption.
Evaluate networks, applications, data environments, and identity management solutions to identify gaps and improvement opportunities.
Develop architecture products, technical documentation, implementation guidance, and reference architectures for Zero Trust initiatives.
Provide subject matter expertise on identity management, access control, micro-segmentation, continuous monitoring, data protection, and least-privilege access.
Facilitate technical working groups, architectural reviews, and stakeholder engagements focused on Zero Trust implementation.
Monitor implementation progress and identify risks, mitigation strategies, and recommendations for improving Zero Trust posture.
Deliver a Monthly ZTA Posture Report documenting transition progress and implementation status, compliance with approved standards and guidance, risks and mitigation recommendations, recommended technical and architectural improvements, and adoption metrics and performance indicators.