Senior Zero Trust Compliance Officer

# Senior Zero Trust Compliance OfficerECSFull Time senior Falls Church, Virginia, USPosted 2 days ago##

Role Overview ECS is hiring a Senior Zero Trust Compliance Officer. This is a full-time role in Falls Church. Part of ECS's Lifecycle hiring, posted 2 days ago. Full responsibilities, required qualifications, and the apply link are listed in the description below.## Salary Context Salary is not disclosed in this posting. Market median for Senior-level Lifecycle roles is $120k-$170k (based on 107 comparable listings).

Many employers share specifics during the interview process or after an initial screen.## Resume Keywords to Include Make sure these keywords appear in your resume to improve ATS scoringORRisk Management Benefits Compliance Everforth ECSZero Trust Sign  up free to auto-tailor your resume with all these keywords and get a higher ATS score##

Job Description Everforth ECS is seeking a Senior Zero Trust Compliance Officer to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax.

Please Note:

This position is contingent upon contract award.

The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP separates business and financial data from operational war fighting data, aiming to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.
* The Senior Zero Trust Compliance Officer serves as WDP's senior-level authority for translating Zero Trust technical implementations into defensible, audit-ready authorization artifacts aligned with the DoW Zero Trust Reference Architecture, DoW Zero Trust Strategy, and NIST Special Publication 800-207. This role directly supports WDP's cybersecurity authorization lifecycle across Unclassified, Secret, and Top Secret environments, ensuring that Zero Trust compliance posture remains current, transparent, and mission-enabling at every stage of the WDP security authorization continuum.
* Designs, documents, and validates Zero Trust compliance across DoW mission systems operating on unclassified and classified networks.
* Translates Zero Trust technical implementations into defensible authorization artifacts aligned with DoW guidance, NIST control families, and the DoW Zero Trust Reference Architecture.
* Evaluates identity-centric access controls, network micro-segmentation, continuous authentication mechanisms, and encrypted traffic protections for compliance sufficiency and audit readiness.
* Maintains System Security Plans, Security Assessment Reports, and Plans of Action and Milestones reflecting Zero Trust capabilities using eMASS, Xacta, and controlled SharePoint repositories.
* Conducts Zero Trust maturity assessments, traces capability alignment to control objectives, and documents compliance posture for review by Authorizing Officials, Senior Information Security Officers, and Component cybersecurity leadership.
* Coordinates with cybersecurity engineers, network teams, and system owners to reconcile technical configurations with authorization requirements.
* Reviews vulnerability findings, control assessment results, and continuous monitoring outputs to validate Zero Trust control effectiveness.
* Produces compliance dashboards, executive summaries, and evidence packages supporting authorization decisions and mission risk awareness.
* Supports inspections, penetration testing reviews, and governance boards through structured documentation and authoritative briefings.
* Advances program values of mission assurance, audit transparency, cyber resilience, and operational trust by delivering consistent compliance alignment between Zero Trust engineering and security authorization outcomes.
* Performs other duties as assigned.
* Current Secret security clearance with the ability to obtain and maintain a Top Secret (TS) security clearance.
* A minimum of 10 years of experience in cybersecurity compliance, security authorization, or Risk Management Framework governance within a federal, defense, or intelligence community environment, with demonstrated expertise in Zero Trust architecture compliance and authorization package development.
* Active IAM Level I certification, satisfied by one of the following:
CompTIA Security+ CE, ISC2 CAP, ISC2 SSCP, or GIAC GSLC.
* Demonstrated hands-on experience developing, maintaining, and submitting RMF authorization packages using eMASS or Xacta, including System Security Plans, Security Assessment Reports, Plans of Action and Milestones, and Body-of-Evidence artifacts supporting Authorization to Operate decisions across Unclassified, Secret, and Top Secret environments.
* Proven ability to assess and document compliance against the DoW Zero Trust Reference Architecture and NIST SP 800-207, including…