Zero Trust Engineer

Zero Trust Engineer

:

Type:
Full Time W/Benefits Ret Match

Location:

US-CO-Denver

Secondary

Location:

US-CO-Colorado Springs

Security Clearance: TS/SCI

Position is contingent upon contract award and funding.

Entarian is seeking an experienced Zero Trust Engineer who would be responsible for designing, implementing, and maintaining Zero Trust security architectures across enterprise environments. This role focuses on strengthening identity, device, network, application, and data protections using Zero Trust principles.

The ideal candidate will have demonstrated experience supporting large-scale defense or space environments involving space systems, ground infrastructure, mission operations, communications networks, cloud environments, or enterprise information technology capabilities.

• Develop and implement Zero Trust security frameworks, policies, and standards.
• Assess current enterprise security posture and identify gaps related to identity, access, network segmentation, and endpoint security.
• Design secure access architectures using technologies such as identity management, MFA, PAM, micro-segmentation, and secure access service edge (SASE).
• Collaborate with cross-functional teams (network engineering, IAM, cloud, security operations) to integrate Zero Trust controls into existing infrastructure.
• Evaluate and recommend Zero Trust technologies and solutions, including identity providers, EDR/XDR, ZTNA, and policy engines.
• Build automation and work-flows to enforce continuous authentication, authorization, and device posture checks.
• Support incident response activities by providing expertise in Zero Trust architecture.
• Develop documentation including architecture diagrams, technical standards, and operational procedures.
• Ensure solutions comply with organizational, regulatory, and industry requirements (NIST 800-207, CIS Controls, etc.).

Salary range: $ - $

• Active Top Secret security clearance with SCI eligibility.
• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related technical discipline. Equivalent experience may be considered.
• Minimum ten (10) years of experience implementing Zero Trust architectures and technologies.
• Strong knowledge of identity and access management, MFA, conditional access, and privilege access management.
• Background in network security, micro-segmentation, firewalls, and VPN/ZTNA solutions.
• Experience with cloud security frameworks (Azure, AWS, or GCP).
• Familiarity with endpoint security tools (EDR/XDR), device compliance, and posture assessments.
• Understanding of modern security models, including SASE, SD-WAN, and policy-based access.
• Ability to translate business requirements into secure technical solutions.
• Proficiency with Microsoft Office Suite, including Word, PowerPoint, Excel, Project, and Outlook.
• Ability to travel approximately 25% to support customer locations, mission partner engagements, cybersecurity assessments, and operational activities.

• Certifications such as CISSP, CCSP, Security+, Azure/AWS security certifications, or vendor-specific Zero Trust certs.
• Experience with automation tools (Power Shell, Python, Terraform).
• Knowledge of regulatory frameworks such as NIST, ISO 27001, and FedRAMP.

Formed through the strategic union of Sev1

Tech and ERT, Entarian is a premier provider of mission-critical engineering and technology solutions. Founded on a legacy of excellence dating back to 1993, Entarian is a product of an evolved and fully diversified engineering and federal technology leader. From deep space to defense and civilian missions, Entarian delivers secure, mission-aligned digital solutions that drive national resilience and operational effectiveness. We don't just support modernization;

we define it.

Join the Mission and Start your Career Journey:

Entarian is an Equal Opportunity and Affidative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.