3 months ago
Arlington, VA, USASenior
Base Salary
$150k - $190k/yr
Responsibilities
- Design, implement, and maintain Zero Trust security architectures across cloud, hybrid, and on-premises environments.
- Implement identity-centric security controls using Microsoft Entra ID, RBAC, Conditional Access, PIM, MFA, and identity governance solutions.
- Design and implement Azure cloud security controls using Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Key Vault, NSGs, Azure Firewall, and Private Endpoints.
- Develop and enforce microsegmentation and network security strategies across enterprise environments.
- Automate security control deployment, policy compliance, remediation, and cloud administration using PowerShell, Python, Azure CLI, Terraform, or Bicep.
- Configure and optimize continuous monitoring, threat detection, incident response, and security reporting using Microsoft Sentinel, Microsoft Defender XDR, Azure Monitor, and Log Analytics.
- Conduct Zero Trust maturity assessments, architecture reviews, security gap analyses, and remediation planning.
- Integrate Zero Trust controls into CI/CD pipelines, Infrastructure as Code, and cloud-native application development processes.
- Partner with client stakeholders, cloud architects, cybersecurity teams, system engineers, and program leadership on implementation roadmaps and technical guidance.
Requirements
- Active Top Secret security clearance.
- Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related technical discipline.
- 10+ years of experience in cybersecurity, cloud security engineering, systems engineering, or enterprise security architecture.
- 5+ years of experience designing, implementing, and supporting Zero Trust architectures in Microsoft Azure and hybrid cloud environments.
- Strong knowledge of Zero Trust principles and frameworks, including NIST SP 800-207 and the CISA Zero Trust Maturity Model.
- Experience with Microsoft Entra ID, Microsoft Defender for Cloud, Microsoft Sentinel, Azure Policy, Microsoft Intune, Conditional Access, Privileged Identity Management, and Azure Key Vault.
- Hands-on experience with Infrastructure as Code, including Terraform, ARM Templates, or Bicep, plus cloud automation and CI/CD platforms.
- Proficiency with PowerShell, Python, Azure CLI, or other scripting languages used for security automation and cloud administration.
- Strong understanding of Azure networking, identity management, encryption, PKI, network segmentation, secure access, and cloud-native security services.
- Experience supporting large enterprise, public sector, or regulated environments and implementing controls aligned with NIST RMF, FedRAMP, security baselines, and authorization requirements.
- Strong analytical, communication, and stakeholder engagement skills, including the ability to present technical recommendations.
Benefits
- Health, dental, and vision insurance.
- 401(k) retirement plan with company match.
- Paid time off and holidays.
- Parental leave and dependent care.
- Flexible work arrangements.
- Professional development opportunities, including company-paid training and/or certifications.
- Employee assistance and wellness programs.
- Eligibility for performance-based bonuses, referral bonuses, and additional incentives.
- Applications are accepted on a rolling basis until the position is filled.
About MetroStar
MetroStar provides IT services and software solutions to U.S. federal civilian and defense agencies, focusing on digital transformation, AI/ML, application modernization, enterprise IT, and human-centered design. The company operates on government contracts to deliver secure systems and mission-support applications. Founded in 1999 and headquartered in Reston, Virginia, MetroStar is privately held and a portfolio company of Veritas Capital.