Zero Trust Network Access Architect​/Engineer - Quantico, VA - Secret Clearance

Supporting the Federal Government, contractors and subcontractors by delivering the industry’s best cleared talent and staffing resources.

Zero Trust Network Access Architect/Engineer
- Quantico, VA
- Secret Clearance Information Technology Quantico , Virginia | Contract To Hire

Zero Trust Security Engineer, Okta
- Quantico, VA (Hybrid) - Top Secret Clearance Quantico , Virginia Senior Elastic Architect/Engineer
- Quantico, VA (Hybrid) - Top Secret Clearance Quantico , Virginia Senior Okta Architect/Engineer
- Quantico, VA (Hybrid) - Secret Clearance Quantico , Virginia Systems Administrator Mid
- New Orleans, LA
- An Active Secret Clearance Required! New Orleans , Louisiana Senior Network Engineer
- McLean, VA
- Active TS/SCI CI polygraph required Mclean , Virginia View all jobs in this category

Active Secret Clearance REQUIRED

must be eligible to be upgraded to TS/SCI. Onsite at least two days a week or as needed at QuanticoVA.

Summary:

Seeking an industry-leading cybersecurity expert with a deep specialization in Zero Trust Network Architecture (ZTNA) and Secure Access Service Edge (SASE). The successful candidate will serve as the chief technical authority for the design, orchestration, implementation, and long-term governance of our enterprise security boundaries.

• Serve as the Principal Architect for the DCSA Zero Trust journey, establishing the technical roadmap, reference architectures, and engineering guidelines aligned with NIST SP 800-207 standards.
• Lead the end-to-end design, implementation, and optimization of Palo Alto Global Protect and Versa Networks SASE to secure cloud, hybrid on-premises, and mobile endpoints.
• Define and govern global security policy templates within Palo Alto Panorama to enforce micro-segmentation, application-level security, and threat prevention.
• Architect advanced data loss prevention (DLP), SSL/TLS decryption, and threat prevention strategies across all egress and ingress points.
• Conduct regular architectural reviews of the SASE and ZTNA configurations to identify performance bottlenecks, configuration drifts, or security gaps, providing advanced mitigation strategies.
• Collaborate with Identity and Access Management (IAM) teams to integrate ZTNA/SASE policies with identity providers (e.g., Okta, Azure AD), ensuring device posture, user context, and continuous authentication are evaluated in real time.
• Guide the integration of Versa SASE and Palo Alto platforms with existing Security Operations Center (SOC) environments, including SIEM, SOAR, and endpoint detection (EDR/XDR) tools.
• Provide technical leadership and guidance to the cybersecurity engineering team, serving as the tier-4 escalations point for complex architectural, routing, and access control challenges.
• Author enterprise-level high-level designs (HLD), low-level designs (LLD), system security plans (SSP), and change-management policies for executive-level and government stakeholders.
• Stay abreast of the latest Palo Alto PAN-OS and Versa Networks feature sets, performing proof-of-concepts (PoC) to evaluate and deploy next-generation capabilities.
• Champion security-as-code and automation initiatives, using APIs and orchestration tools to automate secure connectivity and zero-touch deployments.

• Bachelor’s Degree in Cybersecurity, Computer Engineering, Information Systems Management, or a related field. A Master’s degree or an equivalent combination of military service and 12+ years of highly relevant experience is accepted.
• Minimum of 10 years of progressive experience in network security engineering, enterprise architecture, and infrastructure security.
• At least 3–4 years of direct…