Zero Trust -State Architect STA; Expert

Description

Pueo is seeking a Zero Trust (ZT) Future-State Architect - Senior Technical Advisor (STA) to join our unique team of multidisciplined experts onsite in McLean, VA.

In this role, approximately 60% of this role is technical (architecture, engineering guidance, gap analysis, and solution design). The remaining 40% is communications, coordination, and facilitation.

The ZT Future-State Architect STA will be responsible for the following, but not limited to:

• Serve as the senior technical advisor and implementation lead supporting the CIO’s Zero Trust program.
• Serve as a technical advisor to the Government Zero Trust Program Manager on adoption strategies, roadmaps, prioritization, and policy integration.
• Provide expertise in the design, integration, and implementation of Zero Trust principles across a large, complex enterprise IT environment while ensuring compliance with DoD, IC, and federal cybersecurity mandates.
• Provide expert guidance on integration of Zero Trust capabilities into enterprise networks, multi-cloud, hybrid environments, and Dev Sec Ops  pipelines (ICAM, micro‑segmentation, encryption, continuous monitoring, software‑defined perimeters, etc.).
• Drive progress across multiple CIO divisions that do not report to the Zero Trust program and often have competing priorities.
• Drive agency‑level Zero Trust compliance activities, including maturity assessments, gap analyses, and prioritized remediation planning.
• Develop and refine detailed Zero Trust reference architectures and system designs across all Zero Trust pillars.
• Facilitate cross‑divisional coordination within the CIO organization; navigate conflicting priorities and stakeholder resistance without formal authority.
• Analyze and prioritize adjacent taskings (for example, tool investments or initiatives from other CIO divisions) for alignment with Zero Trust objectives.
• Support limited liaison with GDIP claimants and partners on Zero Trust products and services.
• Support the design and improvement of enterprise services that can serve as common control providers, reducing the burden on individual system owners seeking RMF ATOs.
• Maintain accurate documentation of the current (as‑is) architecture while developing a more detailed, executable to‑be architecture; continuously identify and close gaps between the two.
• Conduct technical assessments across identity, device, network, application, and data layers.
• Contribute to the creation of reusable Zero Trust products and guidance that GDIP claimants and mission partners can consume.
• Collaborate with senior leadership, acquisition teams, engineers, system owners, and mission stakeholders to integrate Zero Trust into enterprise workflows.
• Respond to data calls, develop executive‑level reports and briefings, and serve as a technical liaison ensuring alignment across technical, programmatic, and strategic stakeholders.

Minimum Required

Qualification:

• Must have an active/current Top Secret security clearance with SCI eligibility. Must be able to obtain and maintain a CI poly.
• A master’s degree in related field and 12 years of experience, with at least 5 years dedicated to Zero Trust architecture, enterprise security design, and systems integration.
• Must possess one of the following IAT III Certification in compliance with DoD 8570.01-M and DoD Directive 8140 Cyberspace Workforce Management. (ex; CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP).
• Must be able to operate effectively without direct authority, build coalitions, and translate strategy into executable action.
• In‑depth knowledge of Zero Trust principles, enterprise security architecture, and federal cybersecurity frameworks (NIST SP 800‑207, DoD Zero Trust Strategy, RMF, etc.).
• Strong understanding of…