Jobs at True Zero Technologies, LLC

Designs, scales, and manages AWS WorkSpaces virtual desktop environments, including operating systems, compute, storage, directory and identity integrations, MFA, encryption, networking, monitoring, patching, troubleshooting, application delivery, and cost optimization. The role also requires securing streaming protocols, automating user provisioning, and supporting AWS infrastructure through scripting and core AWS services.

Researches and implements quantum-resistant cryptographic solutions, including NIST-standardized post-quantum algorithms. Assesses enterprise cryptographic systems for quantum vulnerabilities, develops migration and crypto-agility strategies, and integrates quantum-safe security with PKI, TLS, VPNs, cloud platforms, and applications. Performs testing, benchmarking, interoperability validation, and security analysis while producing architecture guidance, inventories, risk assessments, and modernization roadmaps. Collaborates with technical teams and leadership to support organizational post-quantum readiness.

Coordinate delivery of a Federal cybersecurity and Zero Trust acceleration program for the Department of Veterans Affairs. Manage integrated schedules, dependencies, deliverables, implementation waves, risks, Government inputs, contractor reviews, and executive reporting. Support maturity assessments, enterprise architecture activities, engineering and test planning, and system implementation engagements while ensuring lessons learned inform future priorities.

Lead Zero Trust architecture and implementation support across applications, workloads, cloud services, platforms, and legacy infrastructure. Develop reusable security patterns, assess architectures and dependencies, define policy enforcement and workload identity requirements, and support deployment planning, testing, pilots, validation, and operational readiness. Document implementation variants for cloud, hybrid, legacy, and mission-critical environments while identifying deviations and lessons learned to improve enterprise patterns.

Leads the device and endpoint pillar for enterprise Zero Trust architecture and implementation. Defines device identity, posture, compliance, endpoint protection, secure configuration, and access signal requirements. Assesses endpoint technologies, supports pilots and testing, validates dependencies, coordinates with identity and infrastructure teams, and documents implementation outcomes. Requires endpoint security or enterprise security engineering experience, with preferred expertise in federal endpoint requirements and platforms such as Intune, Defender, CrowdStrike, or Tanium.

Leads the Identity pillar by designing reusable Zero Trust identity architecture patterns for federal systems. Defines authentication, authorization, federation, identity proofing, privileged access, conditional access, and lifecycle integration requirements. Maps identity signals to policy decision and enforcement points across applications, networks, devices, and workloads. Assesses identity technologies, supports pilots and implementations, and documents dependencies, risks, deviations, and reusable lessons learned.

Lead the Networks and Environment pillar for a federal Zero Trust acceleration effort. Develop and validate network architecture patterns covering segmentation, policy enforcement, secure connectivity, telemetry, and identity or device integration. Assess hybrid enterprise network implementations, support engineering plans and pilots, create test and rollback plans, evaluate network security technologies, and document implementation lessons and recommendations.

Leads Zero Trust automation and orchestration by designing reusable workflows, developing scripts and API integrations, automating evidence collection and reporting, and supporting standardized deployment and validation tooling. Documents automation architecture, dependencies, security considerations, and handoff requirements while measuring effectiveness and recommending improvements. Requires experience integrating security, analytics, ticketing, and infrastructure platforms, with knowledge of Federal cybersecurity controls and secure automation practices.

Leads data and analytics engineering for Zero Trust maturity assessment and implementation measurement. Designs common data models, integrates and validates enterprise data, develops maturity and risk metrics, supports prioritization and gap analysis, and establishes data quality, lineage, traceability, and documentation practices. Partners with dashboard and automation specialists to streamline reporting and data refresh workflows.

Configure, manage, and troubleshoot Palo Alto NGFWs and Panorama; create security policies (NAT, VPN, URL filtering); deploy IDS/IPS; integrate SASE and Prisma cloud solutions; automate tasks with Python/Ansible/Terraform and APIs; ensure compliance and resolve complex traffic, SSL/TLS, and HA issues.

Manage performance and growth of assigned IDIQ contracts and task orders, oversee staffing, budgets, subcontractors, compliance, and reporting, coordinate cross-functional teams for proposals and delivery, maintain program plans, financials, risk registers, and pursue additional task orders under contract vehicles.

Design, deploy, secure, and maintain enterprise Windows endpoints (Windows 10/11) supporting AI-enabled desktop capabilities. Administer Intune/Endpoint Manager, implement STIG-compliant baselines, configure Conditional Access and Zero Trust controls, automate provisioning with Autopilot and PowerShell, integrate endpoint telemetry with security tools, and support audits and compliance in government cloud environments.

Design and execute AWS GovCloud migrations using the 7 Rs, plan migration waves, automate infrastructure with Terraform, ensure secure hybrid connectivity and Zero Trust controls, validate performance and operational readiness, and support modernization to container and cloud-native platforms.

Design, implement, and operate an enterprise secrets management platform. Onboard applications, automate credential lifecycle (provisioning, rotation, revocation), integrate with AWS services and CI/CD, enforce least-privilege IAM policies, implement PKI and FIPS-compliant cryptography, monitor/audit access, and support GovCloud and DevSecOps integrations.

Design, implement, and operate enterprise IAM/ICAM platforms across on-prem, cloud, SaaS, and hybrid environments. Implement automated provisioning, federation (SAML/OIDC/OAuth/SCIM), PAM, IGA, PIV/CAC and phishing‑resistant MFA. Integrate AWS identity services, enforce least‑privilege access and FICAM alignment, automate workflows, monitor/authentication events, perform access reviews, and collaborate with cross‑functional teams to onboard and secure applications.

Design, deploy, and maintain enterprise PKI and certificate lifecycle automation across Windows, Linux, cloud, containers, applications, and network devices. Implement ACME automation, integrate AWS Private CA/ACM and HSMs, support FPKI/DoD PKI and CAC/PIV, enable mTLS and Zero Trust, establish governance, monitoring, inventory, and troubleshooting processes, and collaborate with security, cloud, identity, and application teams.

Designs, automates, and operates secure enterprise AWS (including GovCloud) and hybrid-cloud environments. Builds IaC, CI/CD and GitOps pipelines, manages Kubernetes/EKS/ECS and container platforms, executes cloud migrations, administers RHEL/Windows servers, enforces DoD/FedRAMP security controls, provides Tier III operations, and leads engineering teams supporting mission-critical government workloads.

Extract, clean, and transform data from multiple sources; build and optimize dashboards and reports; perform root cause analysis and statistical modeling; collaborate with leaders and Data Engineers to translate business needs; streamline data workflows and perform database migrations and schema mapping.

Monitor and maintain network infrastructure, detect and troubleshoot outages and performance issues, escalate incidents, perform routine maintenance and controlled changes, document incidents and changes, and collaborate with teams to improve network availability and resilience.

Develop, document, and maintain RMF policies, procedures, process maps, templates, and governance artifacts. Translate regulatory requirements into workflows, gather stakeholder inputs, support authorization documentation (SSPs, POA&Ms, risk assessments), maintain version control and metrics, and support audits, governance boards, and implementation of RMF processes.