Sr. Zero Trust Engineer III (6794)

Senior Zero Trust engineer on MetroStar's F-35 Joint Program Office work in Arlington, Virginia, designing identity-centred security for Azure, hybrid and on-premises environments. The engineer builds Zero Trust architectures aligned with NIST SP 800-207 and CISA guidance, runs Entra ID controls such as Conditional Access, PIM, MFA and RBAC, secures Azure with Defender for Cloud, Sentinel, Azure Policy, Key Vault and private networking, designs microsegmentation, automates controls with PowerShell, Python, Terraform or Bicep, carries out maturity assessments and gap analyses, and works Zero Trust controls into CI/CD.

MetroStar requires an active Top Secret clearance, a relevant degree, ten or more years in security or cloud engineering, at least five implementing Zero Trust in Azure, and experience with NIST RMF and FedRAMP controls.