Zero Trust Enterprise Architect

Leidos

2d • $107,900 - $195,050 • Onsite

About The Position

Leidos Digital Modernization sector has an excellent opportunity for an experienced, self-directed, Zero Trust Architect. This position is in support of a Department of Defense (DoD) organization, USAFRICOM located OCONUS in Stuttgart, Germany. This position is required to travel OCONUS. Clearance Requirement: You must hold a current DoD Top Secret/SCI clearance to qualify and to be considered for this role.

Requirements

• BA/BS + 8 years recent specialized or AA/AS + 10 years recent specialized or a major cert + 12 years recent specialized or 14 years of recent specialized experience
• Hold a current Top Secret/SCI clearance.
• Current DOD 8570 IAT 2 compliance.
• The candidate must be experienced in overseeing the management and supervision of a minimum of 10 personnel.
• Proven experience as a Zero Trust Architect or in a similar cybersecurity role.
• In-depth knowledge of cybersecurity principles, protocols, and best practices.
• Experience with identity and access management solutions, network security, and endpoint protection.
• Familiarity with cybersecurity frameworks, compliance standards, and regulations.
• Strong problem-solving and analytical skills.

Nice To Haves

• Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Zero Trust Architect (CZTA) are a plus.
• TESA eligibility

Responsibilities

• Lead the design and implementation of a Zero Trust security architecture for the organization.
• Develop and implement strategies to ensure the least privilege access, micro-segmentation, and continuous monitoring of network traffic.
• Collaborate with cross-functional teams to integrate Zero Trust principles into existing and new systems.
• Implement strong authentication and authorization mechanisms to verify user identities and ensure secure access.
• Design and implement role-based access controls (RBAC) and implement identity and access management (IAM) solutions.
• Monitor and audit user access to identify and mitigate potential security risks.
• Implement network segmentation and micro-segmentation strategies to limit lateral movement.
• Design and deploy secure communication channels, including encryption and VPN solutions.
• Collaborate with network engineers to ensure secure configuration and monitoring of network devices.
• Design and implement endpoint protection strategies, including device posture assessment and continuous monitoring.
• Implement application control and device authentication measures.
• Work with IT teams to ensure security configurations on endpoints align with Zero Trust principles.
• Implement continuous monitoring solutions to detect and respond to security incidents.
• Develop and document incident response plans for Zero Trust environments.
• Conduct regular security assessments and penetration testing.

Benefits

• Paid relocation to/from OCONUS location
• Overseas living allowance(s)- HOLA and COLA
• Foreign Earned Income Tax Exemption
• Benefits package including medical, dental, vision insurance; paid time off; 401k with company match; etc.
• Base access (Exchange, dining, post office, commissary access, etc.)
• Thriving Expat Community to discover Germany, Europe and more!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior