Zero Trust Engineer

CGI•Knoxville, TN

3d•Hybrid

About The Position

CGI Federal is a leader in providing IT and cybersecurity solutions, dedicated to supporting mission‑critical federal government initiatives. We are committed to enhancing national security and strengthening government operations through innovative technology, advanced analytics, and expert collaboration. In this role, you will play a key part in delivering secure, modern, and resilient solutions that empower our federal government client's mission. Engineer and operationalize Zero Trust across identity, device, network, and data—implementing MFA, PAM, least‑privilege access, segmentation/micro‑segmentation, and control integrations with SOC telemetry. This position is located in our Knoxville, TN office; however, a hybrid working model is acceptable

Requirements

3-5 years in systems/security engineering; identity, endpoint, and network security expertise.
Scripting/automation (PowerShell, Terraform); policy design and enforcement.
Hands‑on experience with PAM, MFA, conditional access, segmentation.
Security clearance: Ability to obtain/maintain a Public Trust (or higher per client).
US Citizenship or Green Card Required, with eligibility to obtain a public trust clearance.

Nice To Haves

Bachelor's; AZ‑500/SC‑300/CCSP or vendor ZTA credentials a plus.

Responsibilities

Implement conditional access/MFA, just‑in‑time/just‑enough admin, and PAM controls.
Design segmentation/micro‑segmentation; reduce attack surface across hybrid/cloud.
Integrate EDR, DLP/CASB/SWG/ZTNA with SIEM/SOAR; embed forensic tooling for attack reconstruction.
Conduct risk assessments; author policy/SOPs; support Zero Trust governance, audits, and improvements.