Zero Trust Policy Engineer

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop and sustain Zero Trust access policies encompassing identity, device posture, network segments, applications, and data resources.

• Convert mission requirements, risk assessments, and threat intelligence into adaptive access control rules.

• Establish policy logic, enforcement patterns, and authorization decision workflows in accordance with Zero Trust principles.

• Partner with IAM, network, cloud, and application teams to implement and verify policy execution points.

• Correlate identity attributes, device health signals, behavioral indicators, and contextual factors to inform access decisions.

• Assist in planning for microsegmentation, policy development, and rule refinement.

• Aid in the creation of Zero Trust governance frameworks, documentation standards, and policy control baselines.

• Engage in architecture and design discussions to ensure comprehensive Zero Trust policy coverage across enterprise systems.

• Perform policy impact assessments, test enforcement modifications, and support troubleshooting during rollout phases.

• Analyze access activity logs, policy violations, and behavioral signals to improve policies.

• Contribute to the development of Zero Trust playbooks, implementation roadmaps, and knowledge sharing across teams.

• Facilitate alignment with DoD cybersecurity requirements, mission resiliency objectives, and continuous monitoring frameworks.

⛳️ Requirements

• Must possess an active Top Secret clearance, validated by a Tier 5 background investigation.

• Bachelor’s degree in Cybersecurity, Information Assurance, Information Technology, Public Policy with an IT emphasis, or a related discipline.

• At least 7 years of experience in cybersecurity, access control management, Zero Trust operations, or enterprise security policy design.

• Proven experience in developing or maintaining enterprise access policies across identity, network, or application domains.

• Skilled in translating risk indicators, threat intelligence, and mission requirements into enforcement rules.

• Familiarity with Zero Trust principles or implementing access controls within federal or DoD environments.

• Experience collaborating with IAM, network, cybersecurity, and cloud engineering teams on policy integration.

• Strong comprehension of Zero Trust access principles, least-privilege enforcement, and conditional access.

• Knowledgeable about identity-based policies, device posture evaluation, and segmentation logic.

• Acquainted with policy enforcement points in cloud, network, and application environments.

• Understanding of DoD cybersecurity mandates and Zero Trust implementation guidelines.

• Security+ certification is required.

• Preferred experience with identity governance tools, policy engines, or attribute-based access control (ABAC).

• Preferred familiarity with Zero Trust network access (ZTNA), microsegmentation tools, or automation frameworks.

• Preferred experience with behavioral analytics or identity risk scoring tools.

• Strong analytical abilities for the development and refinement of detailed access policies.

• Excellent communication skills for effective collaboration across both technical and non-technical teams.

• Capability to evaluate risk, interpret threat intelligence, and translate findings into actionable controls.

• High attention to detail for maintaining precise, auditable policy structures.

• Ability to balance security, usability, and mission-critical operational requirements.

• Proficient documentation skills for creating policy artifacts, standards, and playbooks.

🏝️ Benefits

• Regular full-time employment.

• Equal employment opportunity and affirmative action protections.

• Consideration for other available positions that require similar skills, education, and experience.