Quick overview
Job description
Senior Zero Trust Engineer (Data Pillar SME)
FedTec is seeking Senior Zero Trust Consultant & Subject Matter Expert (SME) specializing in the Data Pillar of the CISA Zero Trust Maturity Model (ZTMM). Operating within our Zero Trust Program Management Office (ZTA PMO), this role partners with the ZTA Project Manager to drive strategic planning, governance, and business process development.
This is an advisory and coordination role; it does not require direct technical tool implementation, coding, or system configuration. The ideal candidate will possess deep expertise in federal mandates (OMB M-22-09, CISA ZTMM v2.0, NIST SP 800-207/207A) to guide gap analysis, transition roadmaps, and stakeholder alignment.
Location : Woodlawn, MD
Key Responsibilities
PMO Integration & Project Support
- Technical Advisor: Serve as the PMO's dedicated Data Pillar SME, tracking modernization activities alongside the ZTA Project Manager.
- Technical Translation: Convert complex engineering findings, system designs, and vendor capabilities into PMO deliverables (e.g., project plans, milestones, dependencies, risk registers).
- Governance & Briefings: Support PMO governance, sprint planning, and workstream prioritization; provide technical insights during leadership briefings and vendor reviews.
Implementation Gap Analysis & Advisory (Core Function)
- Assess ZTMM v2.0 Core Functions: Lead comprehensive Zero Trust gap analyses across agency data repositories, cloud environments, and on-premises infrastructure.
- Evaluate Data Capabilities: Measure current maturity against CISA ZTMM v2.0 Data functions, advising on:
- Data Inventory Management: Methods to discover, track, and record organizational data assets.
- Data Categorization & Access: Strategies for sensitivity classification, tagging, and granular least-privilege permissions.
- Data Encryption & Availability: Cryptographic controls (rest/transit/use) and resilient data redundancy workflows.
- Information Protection: Frameworks to monitor, prevent, and mitigate data leaks or unauthorized exfiltration.
- Assess Cross-Cutting Integration: Coordinate how Data controls integrate with Visibility & Analytics (SIEM/SOAR logs), Automation & Orchestration (automated labeling/enforcement), and Governance (data policies/compliance reports).
- Roadmaps & Design Review: Formulate transition pathways to advance the agency from "Traditional" toward the "Optimal" CISA ZTMM maturity state; review implementation team designs for NIST SP 800-207 compliance.
Stakeholder Coordination & Process Modernization
- Cross-Team Collaboration: Act as the primary liaison for the Data pillar between the ZTA PMO, cyber engineering teams, data governance bodies, and operations units.
- Process Modernization: Identify outdated data workflows and facilitate technical working groups to resolve cross-pillar engineering dependencies (e.g., Data controls integrated with Identity and Device pillars).
Minimum qualifications
- Overall Experience: 10+ years of professional experience in IT engineering, enterprise architecture, or federal IT consulting.
- Cybersecurity Focus: 6+ years of dedicated experience in cybersecurity engineering, data protection, or cyber risk advisory.
- Advisory & Frameworks: Proven senior advisory experience within an Enterprise PMO, aligning agency strategies with OMB M-22-09, CISA ZTMM v2.0, and NIST SP 800-207.
- Federal Compliance: Strong understanding of FedRAMP cloud security requirements and FISMA risk management frameworks impacting enterprise data governance.
- Education: Bachelor's degree in Cybersecurity, IT, Computer Science, Data Management, or a related field (master's preferred).
- Clearance: Ability to obtain and maintain a Federal Public Trust clearance (Active clearance preferred).
Technical & Soft Skills
- Data Protection Concepts: Deep conceptual understanding of DLP, Data Classification/Labeling, EDRM, data encryption standards, and architectural integration with Identity (ICAM), Device, and Network pillars.
- Project Facilitation: Strong experience in PMO environments using Agile/Scrum; working knowledge of MS Office Suite and ServiceNow for tracking tasks and documentation.
- Communication: Exceptional ability to translate highly technical engineering jargon into clear business risk and project concepts for non-technical PMs and executives.
When You Join FedTec, You Are Joining a Family! We take pride in our work and the true and transparent relationships we build with our employees and partners. Just as you would do for your own family, we prioritize your safety, health, and happiness. That is why we've created the FedTec Total Well-Being program, offering benefits like:
- Health & Wellness: Medical, dental, and vision plans with valuable features like Telehealth virtual care and resources to support your physical and mental well-being.
- Time to Recharge: Generous paid time off to relax and rejuvenate.
- Financial Security: 401(k), company-paid short- and long-term disability, life insurance, and additional voluntary coverage.
- Life & Family Support: Employee Assistance Program (EAP), Pet Insurance, and Prepaid Legal services.
- Recognition & Growth: The FedTec Applause program rewards outstanding contributions, while our Learning & Development programs support your career growth.
- Fitness & Wellness: The FedTec Fit Program includes an on-staff Fitness Coach, personal and group training sessions, company fitness challenges, and ongoing wellness support.
Visit to learn more about who we are and where you can make an impact!
Commitment to Non-Discrimination
As an Equal Opportunity Employer, we consider all qualified applicants without regard to disability, protected veteran status, or any other status protected by law. We are committed to a fair and inclusive workplace where advancement is based on merit, skills, and contributions.
If you feel that your qualifications, talents, and values align with our culture, we welcome you to apply by submitting your resume today!
No Agencies Please
Similar jobs
- OT
Network Security EngineerRecently posted
Octagon Talent · Fort Lauderdale, Florida · Hybrid 🇺🇸
PrismaZero TrustAzure+1TechnologySalary not listed - SC

Mobile Security and Cloud Security SpecialistRecently posted
S3 Connections LLC · United States · Hybrid 🇺🇸
Stakeholder ManagementAWSEncryption+4TechnologySalary not listed - AS
Cyber Security Infrastructure Engineer IVRecently posted
Apex Systems · Sun Prairie, WI · Hybrid 🇺🇸
Active DirectoryDNSLinuxTechnologySalary not listed - GE

Sr. Security EngineerRecently posted
Genesis10 · Atlanta, GA · Hybrid 🇺🇸
AWSEncryptionPKI+2TechnologySalary not listed - AS
Security Logging and Monitoring EngineerRecently posted
Apex Systems · Round Rock, TX · Hybrid 🇺🇸
AdministrativeSalary not listed - DE

Astrix / NHI Security Analyst - 100% Remote - 3 Years ContractRecently posted
Dexperts Inc · United States · Remote 🇺🇸
AWSOAuthSplunk+3TechnologySalary not listed - EN
SIEM EngineerRecently posted
Exl Neo Technologies · United States · Hybrid 🇺🇸
SplunkTechnologySalary not listed - AT

Senior Systems Security Engineer with Security ClearanceRecently posted
Athena Technology Group, Inc. (ATG) · Dahlgren, VA · Hybrid 🇺🇸
LinuxTechnologySalary not listed - TP
Cyber Threat Hunter with Security ClearanceRecently posted
Trellix Public Sector LLC · Lorton, VA · On-site 🇺🇸
Microsoft ExcelMicrosoft OfficeMicrosoft PowerPointTechnologySalary not listed - ID
Senior Network Security Engineer (Aruba ClearPass & Dynamic Segmentation)Recently posted
InOptra Digital Innovations Inc. · United States · Hybrid 🇺🇸
TechnologySalary not listed - RA

Senior Embedded Software Security Engineer- S3ERecently posted
Raytheon · Dallas, TX · Hybrid 🇺🇸
ScrumC++Kanban+4Technology$86.8k - $165.2k/yr - DD

Information Security AnalystRecently posted
Dexian DISYS · Bethesda, MD · On-site 🇺🇸
AWSAzureGoogle Cloud+1TechnologySalary not listed
