Zero Trust Security Architect

Torch Technologies is seeking a Zero Trust Security Architect to lead the technical execution of the Zero Trust for the Joint Staff J7 JTSD. Located in Suffolk, VA or Huntsville, AL, you will collaborate with the Deputy Chief & Technical Director and Division System Architects to embed DoD Zero Trust Strategy principles into every layer of the JWCC Azure environment.

** As a Zero Trust Security Architect your duties will include the following, but are not limited to:*
* * Formulate and implement the Joint Staff J7 Zero Trust Architecture (ZTA) roadmap across all 7 pillars (User, Device, Application & Workload, Data, Network & Environment, Automation & Orchestration, Visibility & Analytics).
* Design fine-grained identity, credential, and access management (ICAM) policies within Microsoft Entra  (Azure AD), Privileged Identity Management (PIM), and Conditional Access.
* Architect micro-segmentation boundaries, software-defined perimeters (SDP), and private endpoint configurations within Azure Government (IL5/IL6).
* Integrate cloud telemetry and logging pipelines into Microsoft Sentinel, Defender for Cloud, and enterprise DoD SIEM solutions.
* Support government leadership in reporting Zero Trust execution metrics and compliance milestones to Joint Staff and DoD CIO stakeholders..  
** Qualifications*
* * U.S. Citizenship
* Active DoW Secret clearance.
* Bachelor’s degree in Cybersecurity, Computer Engineering, or related technical field, plus 10+ years of progressive cybersecurity and cloud architecture experience.
* 3+ years architecting or implementing Zero Trust principles adhering to NIST SP 800-207 and the DoD Zero Trust Reference Architecture.
* Extensive experience with Microsoft Entra , Conditional Access policies, PIM, and Azure Role-Based Access Control (RBAC).
* Current DoD 8570/8140 IASAE II/III or IAM III certification (e.g., CISSP, CISM, or CASP+ CE).
* Strong problem‐solving skills and ability to troubleshoot complex issues
* Effective communication and collaboration skills  
** Preferred Qualifications*
* * Active Top Secret clearance with SCI eligibility.
* Microsoft Certified:
Cybersecurity Architect Expert (SC-100), Microsoft Security Operations Analyst (SC-200), or Azure Security Engineer Associate (AZ-500).
* Direct experience executing DoD Target/Advanced Zero Trust Capability roadmaps in operational IL5 or IL6 environments.
* Proven capability tuning Microsoft Sentinel analytic rules and Defender for Cloud security posture benchmarks in air-gapped or classified cloud environments.
* Strong technical documentation, briefing, and reporting experience  
*
* Schedule:

** M-F; 8-5  
*
* Work Location:

** Suffolk, VA or Huntsville, AL – Hybrid / Flexible On-Site.  
** Travel:
** Yes, 0-10%  
** Relocation Assistance Available:
** No  
** Position Contingent Upon Award of

Contract:

** No
* * Salary Range:** $165,000-$195,000

The salary range information is a general guideline only.  Several factors can influence the salary for a position including but not limited to, Federal Government contract labor categories and contract wage rates, geographic location, business considerations, scope and responsibilities of the position, local or other applicable market conditions, and internal equity. Other factors include the candidate’s qualifications such as relevant prior work experience, specific skills and competencies, education/training, and certifications.  

#LI-DK1      
** Benefits:
** Torch Technologies is proud to offer a stable and professional work environment, a competitive salary, and an excellent, comprehensive benefit package including: ESOP participation, 401(k) match, medical, dental, vision, life insurance, short-term disability, long-term disability, flexible spending accounts, Health Saving Accounts and Health Reimbursement Accounts, EAP, education assistance, paid time off, and holidays.
** Applying to Torch Technologies:
** Only those candidates invited for an interview will be contacted. Employment at Torch Technologies is contingent upon the successful completion of a comprehensive background check.