Search Jobs | Dice.com

801 results (41 new)

Group by company

ZERO TRUST (ZT) PROCESS RE-ENGINEER SME

Zermount Inc.

Arlington, Virginia • Today

Full-time

ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME)

Zermount Inc.

Arlington, Virginia • Today

Full-time

Information Systems Security Engineer (ISSE)-SME

Apex Systems

Washington, District of Columbia • Today

Easy Apply

Full-time

$129 - $139 per hour

Mid-Level DevSecOps SME / Cloud Security Engineer (ISSE)

Dark Wolf Solutions

Herndon, Virginia • Today

Full-time

USD 130,000.00 per year

Staff Cybersecurity Engineer - Zero Trust

General Motors

Remote • Today

Full-time

USD 160,200.00 - 246,300.00 per year

Solutions Architect (Enterprise Security & Cloud Architecture)

I-Link Solutions

Remote • 11d ago

Easy Apply

Contract

Depends on Experience

Application Security Engineer @ Onsite @ Rockville, MD (or) McLean, VA

FutureTech Consultants LLC

McLean, Virginia • 3d ago

Easy Apply

Contract, Third Party

$60 - $70

Senior Information Security Engineer

Randstad Digital

Reston, Virginia • Today

Full-time

USD160,000 - USD200,000

HYBRID::Application Security Engineer at Rockville, MD or McLean, VA

FutureTech Consultants LLC

Hybrid in McLean, Virginia • Yesterday

Easy Apply

Third Party, Contract

Depends on Experience

Cloud Security Engineer 2

Base-2 Solutions, LLC

Bethesda, Maryland • Today

Full-time

Cloud Security Engineer 4

Base-2 Solutions, LLC

Bethesda, Maryland • Today

Full-time

Cloud Security Engineer 3

Base-2 Solutions, LLC

Bethesda, Maryland • Today

Full-time

Security Engineer

Stefanini

Remote or Kansas City, Missouri • 2d ago

Easy Apply

Contract

$57 - $62 /hr

Network Security Microsegmentation Engineer (Remote)

Tandym Tech

Remote or Hybrid • Today

Easy Apply

Contract

$60 - $60 per hour

Senior Security Engineer, Cloud Data Security

Apexon

Remote • 17d ago

Easy Apply

Full-time

Depends on Experience

Cybersecurity / Zero Trust Architect Senior

Chenega MIOS

Arlington, Virginia • Today

Full-time

USD 99,000.00 - 135,000.00 per year

Systems Administrator and Security Analyst

Booz Allen Hamilton

Fort Belvoir, Virginia • Today

Full-time

USD 77,600.00 - 176,000.00 per year

Cloud Security Engineer

HonorVet Technologies

Remote • Yesterday

Easy Apply

Contract

$60 - $65

Automation / Orchestration / Security Engineer

Talent Vista Partners Inc

Remote • 18d ago

Full-time, Third Party

$115 - $125

Cybersecurity / Zero Trust Architect Principal

Chenega MIOS

Arlington, Virginia • Today

Full-time

USD 120,000.00 - 165,000.00 per year

Physical Security Systems Engineer

Georgia IT

Remote or Hybrid in Columbus, Ohio • Today

Easy Apply

Contract

Depends on Experience

Security Engineer

Software Guidance & Assistance

Rockville, Maryland • Today

Contract

USD 83.00 - 87.00 per hour

API Code Security engineer

Javen Technologies, Inc

Remote • Yesterday

Easy Apply

Contract

Depends on Experience

Senior Security Engineer

NVR Inc.

Reston, Virginia • Today

Full-time

USD 105,000.00 - 125,000.00 per year

Lead Enterprise SASE Security Engineer

Judge Group, Inc.

Tysons, Virginia • Today

Contract

USD 75.00 - 85.00 per hour

Senior Security Engineer

Zermount Inc.

Arlington, Virginia • Today

Full-time

Security Engineer

SteerBridge

Vienna, Virginia • Today

Full-time

USD 142,000.00 - 179,000.00 per year

Lead Security Engineer

Bart & Associates, LLC

Suitland-Silver Hill, Maryland • Today

Full-time

Senior Security Engineer

Apex Systems

Merrifield, Virginia • Today

Easy Apply

Full-time

$60 - $73 per hour

Lead Security Engineer

Dev Technology Group Inc.

Suitland-Silver Hill, Maryland • Today

Full-time

USD 120,000.00 - 190,000.00 per year

Job Details

Skills

Publications
Risk Management
Continuous Improvement
Scheduling
Software Development
Performance Metrics
Productivity
Documentation
FOCUS
Gap Analysis
Impact Analysis
Mapping
Decision-making
Problem Solving
Conflict Resolution
ROOT
IT Architecture
Fluency
Systems Architecture
Microsoft Azure
Amazon Web Services
Google Cloud
Google Cloud Platform
Database
System Administration
IT Service Management
ITIL
Process Modeling
Cloud Computing
Network
Roadmaps
Regulatory Compliance
Communication
Prompt Engineering
SAFE
Agile
Auditing
CISA
NIST SP 800 Series
RMF
Risk Management Framework
Information Governance
FISMA
OMB
Artificial Intelligence
Leadership
Collaboration
Real-time
Attention To Detail
Policy Analysis
Science
Information Technology
Computer Science
Cyber Security
CISM
Information Systems
CISSP
Authorization
Information Security
PMP
Six Sigma
Security Clearance
Preventive Maintenance
Performance Management
Project Management
Reporting
Team Leadership
Management

Publications
Risk Management
Continuous Improvement
Scheduling
Software Development
Performance Metrics
Productivity
Documentation
FOCUS
Gap Analysis
Impact Analysis
Mapping
Decision-making
Problem Solving
Conflict Resolution
ROOT
IT Architecture
Fluency
Systems Architecture
Microsoft Azure
Amazon Web Services
Google Cloud
Google Cloud Platform
Database
System Administration
IT Service Management
ITIL
Process Modeling
Cloud Computing
Network
Roadmaps
Regulatory Compliance
Communication
Prompt Engineering
SAFE
Agile
Auditing
CISA
NIST SP 800 Series
RMF
Risk Management Framework
Information Governance
FISMA
OMB
Artificial Intelligence
Leadership
Collaboration
Real-time
Attention To Detail
Policy Analysis
Science
Information Technology
Computer Science
Cyber Security
CISM
Information Systems
CISSP
Authorization
Information Security
PMP
Six Sigma
Security Clearance
Preventive Maintenance
Performance Management
Project Management
Reporting
Team Leadership
Management

Summary

ZERO TRUST (ZT) PROCESS RE-ENGINEERING SME

POSITION OVERVIEW

The Zero Trust Process Re-Engineering SME exists to provide senior-level advisory expertise in assessing, analyzing, and re-engineering the agency's enterprise IT and cybersecurity processes to advance its Zero Trust implementation. This role directly supports TSA's compliance with EO 14028, OMB M-22-09, and related federal mandates by translating policy requirements into actionable process change advisory that spans all five CISA ZTMM v2.0 pillars. The expected outcome is a continuously maturing ZT process posture - with advisory findings, roadmap inputs, and common control catalog contributions that drive measurable ZTMM maturity advancement and defensible IG FISMA compliance performance. This is a senior advisory role, not an execution or documentation support position.

DUTIES & RESPONSIBILITIES

General Duties

Provide senior advisory guidance on the re-engineering of the agency's enterprise IT and cybersecurity processes to align with Zero Trust principles across all five CISA ZTMM v2.0 pillars: Identity, Devices, Networks, Applications & Workloads, and Data.
Continuously monitor the federal ZT policy and regulatory landscape, including EOs, OMB memoranda, NIST publications, and DHS/CISA directives, and deliver real-time risk identification and actionable advisory recommendations before compliance deadlines arise.
Conduct comprehensive gap analyses of existing agency policy documentation against ZT mandates; develop remediation roadmaps and present recommended courses of action for agency concurrence.
Provide advisory support for the development and continuous maturation of the agency's ZT Common Control Catalog (CCC), ensuring recommended approaches align with RMF phases and ZT implementation lifecycle milestones.
Develop recommended updates to the ZT Roadmap and Implementation Plan, incorporating process re-engineering findings and stakeholder input for agency review and approval.
Apply real-time analysis of process performance data and ZT maturity indicators to proactively surface emerging risk areas and deliver timely recommendations, moving beyond periodic reporting to support continuous risk mitigation.
Collaborate with cross-functional stakeholders to validate process outcomes and provide recommended courses of action for continuous improvement.
Support all internal and external ZT data calls, requests, audits, and compliance updates; ensure recommended responses are developed and provided for agency review.
Develop recommended new and revised cybersecurity policy documents and SOPs; all final documentation is subject to agency review and approval.
Provide senior advisory support to ZT leadership on planning, scheduling, solution development, reporting, performance metrics, and program governance.
Leverage AI-assisted analysis tools, automation platforms, and prompt engineering techniques to enhance advisory productivity, accelerate gap analysis and documentation tasks, and enable focus on higher-value technical advisory work; apply all AI capabilities in accordance with agency acceptable use policies and Zermount's ethical AI use guidelines.

SUBJECT MATTER EXPERTISE

Subject Matter Expertise (SME) Area #1 - Zero Trust Policy, Process Re-Engineering & Federal Compliance Advisory

Expert-level mastery of CISA ZTMM v2.0 across all five pillars including demonstrated ability to conduct gap assessments, produce maturity findings, and translate ZTMM criteria into agency-level process change recommendations.
Authoritative knowledge of federal ZT mandates including EO 14028, OMB M-22-09, OMB M-21-31, NIST SP 800-207, NIST SP 800-53 Rev. 5, FISMA, and IG FISMA metrics criteria; ability to independently interpret and apply new guidance as it is released.
Demonstrated capability to lead enterprise-scale process re-engineering efforts in a federal environment - producing advisory artifacts such as gap analyses, process inventories, opportunity registers, change impact analyses, and CISO-ready briefings.
Expert-level proficiency in ZT Common Control Catalog development, including control mapping to NIST SP 800-53 control families across all five ZTMM pillars.
Independent decision-making authority on process re-engineering advisory scope, methodology selection, and recommended approach.
Problem-solving at the intersection of policy compliance and operational process design. Able to diagnose root causes of ZT maturity gaps, prioritize remediation advisory, and sequence recommendations across competing program constraints.

SME Area #2 - Enterprise IT Architecture & Technical Domain Fluency

Foundational working knowledge of enterprise IT systems architecture, including cloud platforms (Azure, AWS, or Google Cloud Platform), network environments, database systems, and systems administration - sufficient to assess ZT process impacts across technical domains and engage credibly with technical stakeholders and pillar SMEs.
Familiarity with enterprise IT service management frameworks (e.g., ITIL) and their intersection with cybersecurity process design and ZT implementation planning.
Understanding of hybrid cloud and on-premises infrastructure models as they relate to ZT policy applicability and process re-engineering scope.
Supports primary ZT policy advisory function by enabling cross-domain process assessment that spans Identity, Devices, Networks, Applications, and Data, avoiding siloed policy analysis that ignores technical implementation realities.
Interacts directly with pillar SMEs (Identity, Network, Devices, Data, Apps & Workloads) to validate process re-engineering recommendations against technical feasibility and implementation constraints.

QUALIFICATIONS

Minimum Requirements

A minimum of 10 years as a Policy Analyst, Process Re-Engineer, or Senior Policy Writer for an enterprise IT or cybersecurity program with demonstrated Zero Trust scope.
Expert knowledge of NIST SP 800-207, NIST SP 800-53 Rev. 5, FISMA, and federal ZT mandates including EO 14028, OMB M-22-09, and OMB M-21-31.
Demonstrated ability to lead process re-engineering efforts directly supporting ZT implementation.
Experience developing or maturing enterprise ZT artifacts including Common Control Catalogs, ZT roadmaps, and implementation plans.
Demonstrated operational experience developing and implementing Zero Trust solutions in a federal agency or large enterprise environment.
Proven experience translating ZT mandates into actionable agency-level policy frameworks, process change initiatives, and implementation roadmaps.
Experience supporting or leading ZT-related IG FISMA metrics reporting or FISMA ZT compliance submissions.
Superb written and oral communication skills; demonstrated ability to navigate highly political client environments with professionalism and tact.
Demonstrated familiarity with AI-assisted analysis tools or prompt engineering; ability to apply AI capabilities ethically to accelerate advisory work.

Preferred Qualifications

Five years of IT cybersecurity experience, including direct support to the U.S. Government. This experience can be concurrent with the minimum 10 years of Policy Analyst, Process Re-Engineer, or Senior Policy Writer experience.
Prior direct involvement in a federal ZT pilot program or enterprise ZT deployment in a planning, advisory, or execution leadership capacity.
Experience developing or significantly maturing a ZT Common Control Catalog aligned to NIST SP 800-53 and CISA ZTMM v2.0.
Familiarity with SAFe for Government (SGP) or equivalent agile delivery methodology in a federal program environment.
Experience with IG FISMA audit preparation and response in the context of federal ZT or FISMA compliance programs.

Competencies

Technical: CISA ZTMM v2.0 (all five pillars), NIST SP 800-207, NIST SP 800-53 Rev. 5, RMF, FISMA, IG FISMA metrics, EO 14028, OMB M-22-09, Common Control Catalog development, enterprise process re-engineering methodology, AI-assisted analysis.
Leadership: Senior advisory engagement with CISO-level and senior federal leadership; ability to bring forward recommended solutions for concurrence rather than soliciting open-ended direction; cross-pillar SME coordination; program governance support.
Behavioral: Proactive risk identification and real-time advisory posture; political acumen in complex federal client environments; high attention to detail in policy analysis and artifact production; continuous learning orientation toward evolving federal ZT guidance.

Education & Certifications

Minimum of a Bachelor of Science (or higher) in Information Technology, Computer Science, Cybersecurity, or a related field.
Required: Certified Information Security Manager (CISM) or Certified Information Systems Security Professional (CISSP), or Certified Authorization Professional (CAP / CGRC), or equivalent certification.
Strongly preferred: Certified Chief Information Security Officer (CCISO), Project Management Professional (PMP), or Six Sigma Green Belt.

Clearance level

Active Secret clearance is required.

WORK LOCATION

Hybrid - Primarily Remote. Occasional onsite work required at the client location in Springfield, VA and Zermount HQ in Arlington, VA.

HOURS OF OPERATION

Business Hours: 8:00 AM EST - 4:30 PM EST.
Core Hours: 9:00 AM EST - 3:00 PM EST.

REPORTING STRUCTURE

Reports To: ZT SME Team Lead
Direct Reports: None.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 90793362
Position Id: 10cb8a6ab81435475486150d01f3c6b3
Posted 20 days ago

Fitment

Dice Job Match Score™

👤 Reviewing your profile...

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Arlington, Virginia

•

Today

ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME POSITION OVERVIEW The Zero Trust Virtualization / Application Development Technical SME exists to serve as the agency's primary technical advisor for the CISA ZTMM v2.0 Applications & Workloads pillar - the pillar responsible for extending ZT enforcement to the application layer across the agency's enterprise software portfolio. This role advances TSA's application access control posture, API security maturity, and DevSecOps adoption by prov

Full-time

Cleared On Site Mid-Level Information Systems Security Officers (ISSO) (5358)

Washington, District of Columbia

•

Today

SMX is seeking a highly motivated Information System Security Officer (ISSO) - Mid to support a mission-critical federal program in Washington, DC. This individual will serve as a key cybersecurity resource responsible for supporting the security posture, compliance activities, and operational security requirements of enterprise information systems and applications. The selected candidate will act as a trusted advisor to System Owners (SOs), Business Process Owners, Information System Security M

Full-time

USD 105,200.00 - 176,900.00 per year

Information Systems Security Officer (ISSO), Mid

Washington, District of Columbia

•

Today

Description Quantum Sky is searching for an Information Systems Security Officer (ISSO), Mid to support a federal customer in Washington, DC We are looking for a highly organized, proactive, and customer-focused cybersecurity professional who excels at building trusted relationships, communicating with both technical and executive stakeholders, and independently driving complex initiatives to successful completion. The ideal candidate thrives in a fast-paced environment, embraces ownership and

Full-time

USD 105,000.00 per year

Business Process Re-Engineering Specialist

Remote or Fort Belvoir, Virginia

•

Yesterday

Overview Amyx is seeking a Business Process Re-Engineering Specialist for our Defense Logistics Agency programs. Responsibilities Assists with identification, assessment, and recording of near, medium, and long-term business needs and technology solutions. Prepares and track project plans for project inception to completion. Assists with facilitation of the implementation of new functionality, training, and troubleshooting. Participates in effective problem solving. Participates in frequent b

Full-time