Job description

Electrosoft Services, LLC is an award-winning company that provides comprehensive technology-based solutions and services to federal customers. While cybersecurity is our specialty, we also focus on ICAM, Zero Trust, digital engineering and transformation, and enterprise AI and intelligent automation. We always seek to delight our customers, so we retain highly qualified employees and offer them meaningful work, growth opportunities, and work-life balance. What sets us apart from all other contractors is the sense of teamwork our employees feel – and the knowledge that outstanding effort is recognized and rewarded. The camaraderie we share emanates from Lunch & Learn sessions where we explore new ideas together, fun group activities ranging from escape rooms to miniature golf, and much, much more. If we’ve described you and your dream workplace, please apply and share in the many benefits and opportunities we offer. Zero Trust Cybersecurity Engineer Job description: Electrosoft Inc. is seeking motivated Zero Trust (ZT) Cyber Security Engineers to immediately contribute to our customer's ZT initiatives. The successful candidate will collaborate closely with the customer to assess and document the current state of on-premises and cloud-based network enclaves and applications, identify gaps in ZT implementation, and develop/execute migration plans that leverage the full benefits of ZT. These efforts will directly support achieving both the 2027 and 2032 target objectives for baseline and advanced ZT. In this role, you'll become a subject matter expert in one of the DoW CIO seven pillars of ZT, guiding the team towards solutions that prioritize mission success and the protection of data, systems, and personnel. Duties & Responsibilities: Perform Zero Trust security readiness assessments (e.g. gap analyses, maturity assessments and strategic vectoring) Develop Zero Trust implementation plans/roadmaps to achieve zero trust security and automation benefits and associated milestones Research Zero Trust security solutions providing details on expected benefits, integration considerations and comparison to like technologies Provide recommendations on zero trust policy, governance, processes, workflows, and expected organizational change and associated milestones Work to infuse and standardize Zero Trust design principles across all pillars in a Zero Trust model (e.g. Users, Devices, Networks, Applications, Data, etc.) Understand end-to-end Zero Trust architecture technologies and concepts, such as SD-WAN, SASE, edge computing, cloud technologies, enterprise identity, microservices, containers, encryption, tokenization, AI, ML, SIEM, SOAR, UEBA, threat modeling, SDP, etc. Coordinate with appropriate organizational stakeholders to tailor Zero Trust requirements and coordinate communications, plans and implementation within their network/application environment(s). Develop innovative approaches and create efficiencies to our existing practices Work across government and industry to evaluate and shape policy around Zero Trust and related topics Be well-informed of federal and commercial best practices, implementations, and solutions to infuse into our client environments Articulate security concerns and risks related to currently implemented or planned solutions and develop remediation or mitigation plans Map government/customer requirements and security control frameworks (e.g. NIST, RMF, DISA, OMB, etc.) to designed technical controls Assist in the continued documentation of the current enterprise ZT program status through to full and complete implementation of all 152 Zero Trust activities and objectives Apply professional-level functional knowledge to solve problems requiring the identification and analysis of moderately complex challenges Act as a supporting role to the Pillar Leads and responsible for leading the effort to organize the execution of ZT efforts by influencing and building the appropriate coalitions across multiple departments and disciplines and serve as a Subject Manager Expert in assigned domain area(s) Drive the development of ZT technology solutions and plans towards Zero Trust goals and objectives including integration with Identity and Access Management (IAM), Data Security, Endpoint Security, Policy, and Trust engines, providing recommendations and solutions with a full understanding of cross-organizational impact and requirements Utilize threat modeling techniques to develop Zero Trust controls to be applied to architecture, data, network, and applications Partner with internal and external IT organizations to shift plans/efforts toward federated access and authentication methodologies that reduce risk Work with or establish teams within the architecture supporting policies and standards and provide in-depth knowledge and guidelines driving towards a Zero Trust solution Mentor systems program manager, security professionals, engineers, administrators, developers and architects on zero trust requirements and potential solutions Proactively accumulate and maintain knowledge of current and emerging/evolving technologies, concepts, and trends Basic Qualifications: Minimum of 4 years of experience in network solutions architecture, engineering, implementation, integrations, and operations of enterprise and/or carrier-class networks. Experience working with cloud-based network infrastructures such as AWS or Azure or GCP or Oracle Cloud. Hands on experience with common, enterprise grade network security & SIEM technologies (such as Zscaler, Palo Alto, Cisco, Juniper, Microsoft, Splunk, ELK etc.). Familiarity with the NIST 800, FedRAMP, Risk Management Framework, Security Controls, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines. Excellent interpersonal, verbal, and written communication skills and ability to work and clearly communicate with all levels of management and staff Executive collaboration and partnership skills across teams, customer service skills and interaction Knowledge of Zero Trust Architectures (ZTA), principles and practices Experience with enterprise and security architectures Education: Minimum of a Bachelor of Science (or higher) in one of the following: computer engineering, computer science, IT, cyber security, or a related field. Relevant years of experience may be used in substitution situations where the candidate does not have a bachelor’s degree in the required field. Certifications: 8140 Advanced certifications (e.g. CISSO, CISSP-ISSAP, GCSA, GICSP, GCLD, GCIA, or equivalent) Preferred that you also have one or more of the following certifications: Cloud (e.g., AWS, Azure, Google Cloud Platform) Security (e.g., Zscaler, Palo Alto, Cisco, Juniper, Microsoft, Splunk, ELK) Clearance level: Minimum of an active Secret Clearance. Work Location: Required onsite work at the client location at Scott Air Force Base, Illinois with some ability to telework on occasion. The actual base salary offered will be determined based on a variety of factors, including, but not limited to, the candidate’s relevant years and depth of experience, skills and qualifications, education, certifications, internal equity, and the specific requirements of the position. Candidates should not assume they will be offered the top of the posted range, as compensation is based on the individual qualifications and overall fit for the role. Salary Range $120,000 — $130,000 USD Electrosoft is an Equal Opportunity Employer/Veterans/Disabled

Requirements

Must-haves

Zero Trust Cybersecurity Engineer
Perform Zero Trust security readiness assessments (e.g. gap analyses, maturity assessments and strategic vectoring)
Develop Zero Trust implementation plans/roadmaps to achieve zero trust security and automation benefits and associated milestones
Research Zero Trust security solutions providing details on expected benefits, integration considerations and comparison to like technologies
Provide recommendations on zero trust policy, governance, processes, workflows, and expected organizational change and associated milestones
Work to infuse and standardize Zero Trust design principles across all pillars in a Zero Trust model (e.g. Users, Devices, Networks, Applications, Data, etc.)
Coordinate with appropriate organizational stakeholders to tailor Zero Trust requirements and coordinate communications, plans and implementation within their network/application environment(s).
Develop innovative approaches and create efficiencies to our existing practices
Work across government and industry to evaluate and shape policy around Zero Trust and related topics
Be well-informed of federal and commercial best practices, implementations, and solutions to infuse into our client environments
Articulate security concerns and risks related to currently implemented or planned solutions and develop remediation or mitigation plans
Map government/customer requirements and security control frameworks (e.g. NIST, RMF, DISA, OMB, etc.) to designed technical controls
Assist in the continued documentation of the current enterprise ZT program status through to full and complete implementation of all 152 Zero Trust activities and objectives
Apply professional-level functional knowledge to solve problems requiring the identification and analysis of moderately complex challenges
Utilize threat modeling techniques to develop Zero Trust controls to be applied to architecture, data, network, and applications
Partner with internal and external IT organizations to shift plans/efforts toward federated access and authentication methodologies that reduce risk
Work with or establish teams within the architecture supporting policies and standards and provide in-depth knowledge and guidelines driving towards a Zero Trust solution
Mentor systems program manager, security professionals, engineers, administrators, developers and architects on zero trust requirements and potential solutions
Proactively accumulate and maintain knowledge of current and emerging/evolving technologies, concepts, and trends
Minimum of 4 years of experience in network solutions architecture, engineering, implementation, integrations, and operations of enterprise and/or carrier-class networks.
Experience working with cloud-based network infrastructures such as AWS or Azure or GCP or Oracle Cloud.
Hands on experience with common, enterprise grade network security & SIEM technologies (such as Zscaler, Palo Alto, Cisco, Juniper, Microsoft, Splunk, ELK etc.).
Familiarity with the NIST 800, FedRAMP, Risk Management Framework, Security Controls, and the Federal Information Security Modernization Act (FISMA) operating standards and applicable guidelines.

Nice-to-haves

Preferred that you also have one or more of the following certifications: Cloud (e.g., AWS, Azure, Google Cloud Platform) Security (e.g., Zscaler, Palo Alto, Cisco, Juniper, Microsoft, Splunk, ELK)

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aimlawsazuregcp

Platform: greenhouse
Effort: quick