Zero Trust Systems Engineer SME

Zero Trust Systems Engineer Technical SME (Devices)

Military Friendly & Preferred - HOH Sponsor

Zermount Inc. is seeking a Zero Trust (ZT) Systems Engineer Technical SME who will assist in providing security for one of our federal clients. The ZT Technical SME will be part of the implementation of ZT principles across the pillars of ZT (identity, device, network, application and workload, and data) to assist the client in meeting the requirements set forth by EO 14028 and OMB M 22-09.

As a key member of our cybersecurity department, you will be responsible for designing, implementing, and maintaining Zero Trust architectures to ensure the security and integrity of our systems, with a specific focus on supporting Applications and Workloads. This role will primarily involve remote work with occasional on‑site work required at the client location in Springfield, VA, and our headquarters in Arlington, VA.

• Assess, design, and implement Zero Trust architectures for agency systems, computer programs, and services that execute on‑premises, on mobile devices, and in cloud environments.
  • Collaborate with cross‑functional teams to integrate Zero Trust principles into the design, development, and deployment of applications and workloads.
  • Conduct regular security assessments, vulnerability scans, and penetration testing for enterprise and system‑specific devices to identify and mitigate risks.
  • Monitor and respond to security incidents related to applications and workloads, performing root cause analysis, and implementing corrective actions.
  • Develop and enforce security policies, standards, and procedures specific to applications and workloads in alignment with industry best practices and regulatory requirements.
  • Stay updated on emerging threats, vulnerabilities, and security technologies relevant to applications and workloads, and apply them to enhance security posture.
  • Provide technical guidance and mentorship to junior team members in the areas of Zero Trust for applications and workloads.

• A minimum of 10 years of IT cybersecurity experience including direct support for the US Government and 7 years acting as an ISSO, assessor, or compliance analyst for enterprise IT systems OR a relevant Bachelor's Degree in IT, Computer Science, or Engineering and 7 years of IT cybersecurity experience including direct support for all US Government and 5 years acting as an ISSO, assessor, or compliance analyst.
• Knowledge of NIST guidelines and FISM Cybersecurity compliance requirements.
• Technical knowledge of complex enterprise IT systems.
• Knowledge and experience using relevant cybersecurity and analysis tools such as Archer, Nessus Security Center, Splunk, etc.
• Experience communicating effectively, both oral and written, with technical, non‑technical, and executive‑level customers.
• Knowledge of EO 14028, OMB M 22-09, Federal, DoD, and CISA Zero Trust Architecture, Maturity Model, and Technical Reference Architectures.
• Excellent communication, collaboration, and problem‑solving skills.
• Ability to work independently and as part of a team.
• Ability to navigate complex and politically sensitive client environments with professionalism, patience, and tact.
• Demonstrated ability to effectively engage and manage relationships with highly political clients while maintaining a professional demeanor, exhibiting patience, and navigating sensitive situations with tact.

• Proven Experience in Policy Enforcement:
  • With a track record of success, the candidate has effectively assisted agencies or organizations in achieving policy enforcement goals. They have utilized automated methods to manage devices and virtual assets, ensuring compliance throughout their lifecycle. This includes approving software, identifying vulnerabilities, and applying necessary patches. The candidate has demonstrated expertise in integrating device, software, configuration, and vulnerability management across all environments, including virtual assets.
• Proven Experience in Asset & Supply Chain
  
  Risk Management:
  • The candidate has a proven history of helping agencies or organizations…