Zero Trust Security Architect

Torch Technologies•Huntsville, AL

1d•Hybrid

About The Position

Torch Technologies is seeking a Zero Trust Security Architect to lead the technical execution of the Zero Trust for the Joint Staff J7 JTSD. Located in Suffolk, VA or Huntsville, AL, you will collaborate with the Deputy Chief & Technical Director and Division System Architects to embed DoD Zero Trust Strategy principles into every layer of the JWCC Azure environment.

Requirements

U.S. Citizenship
Active DoW Secret clearance.
Bachelor’s degree in Cybersecurity, Computer Engineering, or related technical field, plus 10+ years of progressive cybersecurity and cloud architecture experience.
3+ years architecting or implementing Zero Trust principles adhering to NIST SP 800-207 and the DoD Zero Trust Reference Architecture.
Extensive experience with Microsoft Entra ID Government, Conditional Access policies, PIM, and Azure Role-Based Access Control (RBAC).
Current DoD 8570/8140 IASAE II/III or IAM III certification (e.g., CISSP, CISM, or CASP+ CE).
Strong problem‑solving skills and ability to troubleshoot complex issues
Effective communication and collaboration skills

Nice To Haves

Active Top Secret clearance with SCI eligibility.
Microsoft Certified: Cybersecurity Architect Expert (SC-100), Microsoft Security Operations Analyst (SC-200), or Azure Security Engineer Associate (AZ-500).
Direct experience executing DoD Target/Advanced Zero Trust Capability roadmaps in operational IL5 or IL6 environments.
Proven capability tuning Microsoft Sentinel analytic rules and Defender for Cloud security posture benchmarks in air-gapped or classified cloud environments.
Strong technical documentation, briefing, and reporting experience

Responsibilities

Formulate and implement the Joint Staff J7 Zero Trust Architecture (ZTA) roadmap across all 7 pillars (User, Device, Application & Workload, Data, Network & Environment, Automation & Orchestration, Visibility & Analytics).
Design fine-grained identity, credential, and access management (ICAM) policies within Microsoft Entra ID (Azure AD), Privileged Identity Management (PIM), and Conditional Access.
Architect micro-segmentation boundaries, software-defined perimeters (SDP), and private endpoint configurations within Azure Government (IL5/IL6).
Integrate cloud telemetry and logging pipelines into Microsoft Sentinel, Defender for Cloud, and enterprise DoD SIEM solutions.
Support government leadership in reporting Zero Trust execution metrics and compliance milestones to Joint Staff and DoD CIO stakeholders.