Strategic Planning

Strategic Planning Engineer Jobs

11 jobs found

21d ago

Lead Security Engineer

Leidos Annapolis Junction, MD

Annapolis Junction, MD

21d ago

$154k - $278k/yr Full time Manager Senior Engineering

Apply Now

Job Description

Benefits and rewards

Leidos offers a competitive compensation package for the Lead Security Engineer role, onsite in Annapolis Junction, Maryland. The annual salary ranges from USD 154,050 to 278,475. The benefits program includes paid time off, 11 paid holidays, and a 401K with a 6% company match and immediate vesting. It also features flexible schedules, discounted stock purchase plans, opportunities for technical upskilling, education and training support, and parental paid leave.

Paid Time Off
11 paid Holidays
401K with a 6% company match and immediate vesting
Flexible Schedules
Discounted Stock Purchase Plans
Technical Upskilling
Education and Training Support
Parental Paid Leave

Location: Annapolis Junction, MD onsite. In this role you will lead all security engineering efforts for a large, complex network, mentor ISSOs and ISSEs, and help ensure ATOs and STE/STN compliance.

Responsibilities

Own the overall security architecture by defining, implementing, and verifying security requirements across systems.
Act as a security subject matter expert, providing guidance and oversight for the end-to-end security architecture.
Engage with multiple system owners across networks to interpret, negotiate, and refine system and security requirements.
Define and drive security strategy including risk assessment and management, security control assessment, continuous monitoring, service design, and broader cybersecurity program support.
Identify and analyze security issues across complex, highly integrated systems and environments, and develop clear remediation recommendations.
Design, develop, and execute static and dynamic application security testing, as well as penetration testing activities.
Partner with development teams to improve understanding of vulnerabilities, attack vectors, and effective remediation techniques.
Lead and mentor a team of program security engineers in day-to-day security engineering activities.
Collaborate with the program security team to ensure STE/STN and continuous monitoring requirements are met for Test, Integration, and Development environments.
Clearly articulate program security requirements, risks, and compliance challenges to multiple customer points of contact.
Coordinate with internal cross-functional teams to plan, prioritize, and execute remediation and other security-related activities.

Requirements

Master’s degree in Information Technology, Information Assurance, or a related field, and at least 15 years of relevant experience. Additional experience may substitute for a degree.
At least 10 years of experience leading large, diverse Security Engineering teams, including ISSO and ISSE teams.
Current active CISSP certification.
Certified Scrum Master certification.
At least 5 years of experience applying Agile methodologies in security engineering projects, including Scrum or SAFe frameworks.
Extensive hands-on experience with modern security tools; hardware and software security implementations; communication protocols; encryption technologies; and web services.
Expert-level understanding of security vulnerabilities and remediation techniques, including risk assessment, risk management, and security strategy/design.
Extensive experience formulating, implementing, and assessing IT security policy.
Solid understanding of ATOs, SSPs, and STE/STN requirements.
Direct experience collaborating with software developers, software testers, and integration, deployment, and sustainment teams.
Strong communication and interpersonal skills, with the ability to clearly convey program requirements and system compliance challenges to multiple customer stakeholders.
Demonstrated ability to coordinate across multiple internal teams for planning and remediation activities.
Solutions oriented team player with a high level of self-initiative.
Clearance: TS/SCI with Polygraph required.

View full job page →

21d ago

Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Los Angeles, CA

Los Angeles, CA

21d ago

$105k - $208k/yr Full time Cloud Architecture Cloud Platforms Consultant

Apply Now

Job Description

Senior Consultant in Deloitte's Cyber Enterprise Security group focused on modernizing network security with cloud-delivered zero trust architectures using Zscaler across on premise and cloud environments.

RESPONSIBILITIES

Design, deploy, and manage ZIA and ZPA capabilities across enterprise client environments
Support zero trust network access transformations, replacing legacy VPNs and updating access controls
Configure and optimize Zscaler security features including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implement branch, cloud, and application connectors across on‑premises and cloud setups (AWS, Azure, GCP)
Develop technical deliverables, solution designs, and client-facing recommendations aligned to security, network transformation, and operations requirements

REQUIREMENTS

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
Zscaler Digital Transformation Engineer (ZDTE) certification is required
5+ years of progressively responsible experience in network security engineering
5+ years designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and ATP/DLP policies in enterprise-scale environments
5+ years designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust architectures replacing legacy VPNs
1+ years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing and network segmentation to replace traditional SD-WAN platforms
1+ years designing, deploying, and managing Zscaler Cloud Connector in cloud environments (AWS, Azure, GCP) with workload-to-internet and workload-to-workload inspection and integration with VPCs, VNets, and Transit Gateways
3+ years configuring and tuning advanced Zscaler security features including Cloud Sandboxing, Advanced Threat Protection, IPS, Cloud Browser Isolation, and DLP policies
3+ years implementing and troubleshooting SSL/TLS inspection within ZIA, covering certificate management, decryption policy design, bypass rules, and handling certificate-pinned applications
1+ years working with Zscaler AI capabilities, including AI-driven policy recommendations, Digital Experience Monitoring (ZDX), and AI/ML threat intelligence for automated responses
3+ years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle, access reviews, and RBAC in the Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors in cloud-native architectures
3+ years deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and response workflows
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and infrastructure-as-code workflows
Experience designing and presenting Zscaler architectures tailored to client requirements and communicating concepts to executives and non-technical stakeholders
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication in ZIA and ZPA
Ability to travel up to 50 percent, depending on client engagement
Limited immigration sponsorship may be available

TECHNOLOGIES

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
ZDX
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Terraform, Ansible, Python
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Okta, Azure AD, Ping Identity
ZIdentity

BENEFITS

Discretionary annual incentive program

THE TEAM

Our Enterprise Security offering integrates security across digital transformation, safeguarding a client’s technical backbone while enabling secure, accelerated modernization. The practice spans security architecture, secure development and deployment, cloud security, application security, and security for emerging technologies and connected products.

PREFERRED QUALIFICATIONS

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents (e.g., GPEN, GCSA)
Ability to conduct SASE vendor competitive analyses and advise clients on solution choices based on use cases (for example Zscaler vs. Palo Alto Prisma vs. Netskope)
Capability to perform Zero Trust Architecture assessments and develop roadmaps aligning Zscaler capabilities with NIST SP 800-207 or CISA Zero Trust Maturity Model frameworks
Previous consulting or Big 4 experience with a track record delivering enterprise network security or SASE transformation engagements

View full job page →

21d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Cleveland, OH

Cleveland, OH

21d ago

$105k - $208k/yr Full time Cloud Platforms Data Security Identity and Access Management

Apply Now

Job Description

Join Deloitte's Cyber practice in Cleveland, onsite, to help clients modernize network security through cloud-delivered zero trust architectures. In the Cyber Zscaler Network Security Engineer / Senior Consultant role, you will design, deploy, and optimize Zscaler capabilities across complex enterprise environments, guiding security transformations from strategy through implementation. This onsite position in Cleveland, OH offers a salary range of USD 105,400 to 207,800 per year and requires a technical BA/BS with at least 1 year of relevant experience.

Responsibilities

Plan, deploy, and operate Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) across enterprise client environments.
Support zero trust network access transformations by migrating from legacy VPNs and updating access controls.
Configure and tune Zscaler security features, including policy management, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection.
Deploy branch, cloud, and application connectors across on‑premises and cloud environments (AWS, Azure, GCP).
Produce technical deliverables, solution designs, and client-facing recommendations aligned with enterprise security, network transformation, and operational requirements.

Requirements

Bachelor’s degree in a technical field or equivalent work experience (e.g., Computer Science, Cyber Security, Information Technology).
Zscaler Digital Transformation Engineer (ZDTE) certification is required.
Five or more years of progressively responsible experience in network security engineering.
Five or more years of hands-on experience designing, deploying, and managing ZIA, including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise-scale environments.
Five or more years of hands-on experience designing, deploying, and managing ZPA, including application segment configuration, access policies, connector deployment, and zero trust network access architectures replacing legacy VPN infrastructure.
One or more years designing, deploying, and managing Zscaler Branch Connector with BGP/static routing configurations and network segmentation, replacing traditional SD-WAN platforms.
One or more years designing, deploying, and managing Zscaler Cloud Connector, including deployments within AWS, Azure, or GCP, workload-to-internet and workload-to-workload inspection, and integration with cloud-native networking constructs (VPCs, VNets, Transit Gateways).
Three or more years configuring and tuning Zscaler advanced security features (Cloud Sandboxing, ATP, IPS, CBI, DLP policies).
Three or more years implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling certificate-pinned applications.
One or more years working with Zscaler AI-powered capabilities, including AI-driven policy recommendations, Digital Experience Monitoring (ZDX), and AI/ML-based threat intelligence for automated threat response.
Three or more years defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle management, access reviews, and RBAC in the Zscaler Admin Portal.
Experience implementing ZIdentity for centralized identity management.
Three or more years with one or more major cloud providers (AWS, GCP, Azure) to deploy ZPA App Connectors in cloud-native architectures.
Three or more years deploying Zscaler Cloud Connector.
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows.
Experience with Zscaler APIs and automation tooling (Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows.
Experience designing and presenting Zscaler solution architectures tailored to client requirements, translating technical concepts for executive and non-technical stakeholders.
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication within ZIA and ZPA deployments.
Ability to travel up to 50 percent on average based on client engagements.
Limited immigration sponsorship may be available.

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
Zscaler AI-powered capabilities
ZDX
Cloud Sandboxing
Advanced Threat Protection (ATP)
Intrusion Prevention (IPS)
Cloud Browser Isolation (CBI)
Data Loss Prevention (DLP)
SSL/TLS inspection
Zscaler APIs
Terraform
Ansible
Python
Splunk
Microsoft Sentinel
Palo Alto XSOAR
Okta
Azure AD
Ping Identity
ZIdentity
AWS
GCP
Azure
SAML
SCIM

Benefits

Discretionary annual incentive program eligibility

Preferred Qualifications

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents (e.g., GPEN, GCSA).
Ability to conduct SASE vendor competitive analyses and advise clients on solution selection (for example Zscaler vs Palo Alto Prisma vs Netskope).
Experience conducting Zero Trust Architecture assessments and developing roadmaps aligned to NIST SP 800-207 or the CISA Zero Trust Maturity Model.
Previous consulting or Big Four experience with a track record delivering enterprise network security or SASE transformation engagements.

View full job page →

23d ago

Cyber Zscaler Network Security Engineer / Senior Consultant, Strategy, Growth, and Transformation

Deloitte Washington, DC

Washington, DC

23d ago

$105k - $208k/yr Full time Cloud Cloud Architecture Cloud Computing

Apply Now

Job Description

At Deloitte, the Cyber Zscaler Network Security Engineer / Senior Consultant helps shape secure digital transformation for enterprise clients by designing, deploying, and optimizing Zscaler based zero-trust security across on-premises and cloud environments. The role emphasizes guiding strategic security transformations, modernizing access controls, and protecting large-scale networks. This position is onsite in Washington, DC, with a salary range of USD 105,400 to 207,800 per year.

Responsibilities

Designing, deploying, and managing Zscaler Internet Access (ZIA) and Zscaler Private Access (ZPA) capabilities across enterprise client environments
Supporting zero trust network access (ZTNA) transformations, including replacement of legacy virtual private network (VPN) infrastructure and modernization of access controls
Configuring and optimizing Zscaler security features, including policy administration, SSL/TLS inspection, advanced threat protection, data loss prevention, and cloud-based traffic inspection
Implementing branch, cloud, and application connector architectures across on-premises and cloud environments, including AWS, Microsoft Azure, and Google Cloud Platform (GCP)
Developing technical deliverables, solution designs, and client-facing recommendations aligned to enterprise security, network transformation, and operational requirements

Requirements

BA/BS degree in a technical field (e.g., Computer Science, Cyber Security, Information Technology, or equivalent work experience)
Zscaler Digital Transformation Engineer (ZDTE) certification required
5+ years of progressively responsible experience in network security engineering
5+ years of hands-on experience designing, deploying, and managing Zscaler Internet Access (ZIA), including web filtering, DNS security, cloud firewall, bandwidth controls, and advanced threat protection policies in enterprise-scale environments
5+ years of hands-on experience designing, deploying, and managing Zscaler Private Access (ZPA), including application segment configuration, access policies, connector deployment, and zero trust network access (ZTNA) architectures replacing legacy VPN infrastructure
1+ years of experience designing, deploying, and managing Zscaler Branch Connector, and configuring BGP/static routing configurations and network segmentation, replacing traditional SD-WAN platforms (e.g., Cisco, VMware, Aruba)
1+ years of experience designing, deploying, and managing Zscaler Cloud Connector, including deployment within cloud environments (AWS, Azure, and/or GCP), workload-to-internet and workload-to-workload traffic inspection, and integration with cloud-native networking constructs (e.g., VPCs, VNets, Transit Gateways)
3+ years of experience configuring and tuning Zscaler advanced security features, including Cloud Sandboxing, Advanced Threat Protection (ATP), Intrusion Prevention (IPS), Cloud Browser Isolation (CBI), and Data Loss Prevention (DLP) policies
3+ years of experience implementing and troubleshooting SSL/TLS inspection within ZIA, including certificate management, decryption policy design, bypass rules, and handling of certificate-pinned applications
1+ years of experience with Zscaler AI-powered capabilities, including AI-driven policy recommendations, Digital Experience Monitoring (ZDX), and leveraging Zscaler's AI/ML-based threat intelligence for automated threat response
3+ years of hands-on experience defining, managing, and reviewing Zscaler security policies, including rule base optimization, policy lifecycle management, access reviews, and RBAC within the Zscaler Admin Portal
Experience implementing ZIdentity for centralized identity management
3+ years of experience with one or more major cloud service providers (AWS, GCP, Azure) to deploy ZPA App Connectors within cloud-native architectures
3+ years of experience deploying Zscaler Cloud Connector
Experience integrating Zscaler with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, Palo Alto XSOAR) via log streaming, API connectors, or syslog for threat detection and incident response workflows
Experience with Zscaler APIs and automation tooling (e.g., Terraform, Ansible, Python) for provisioning, policy management, and configuration-as-code workflows
Experience designing and presenting Zscaler solution architectures tailored to client requirements, translating technical concepts for executive and non-technical stakeholders
Familiarity with identity provider integrations (e.g., Okta, Azure AD, Ping Identity) for SAML/SCIM-based authentication within ZIA and ZPA deployments
Ability to travel up to 50%, on average, based on the work performed and the clients served
Limited immigration sponsorship may be available

Technologies

Zscaler Internet Access (ZIA)
Zscaler Private Access (ZPA)
Zscaler Branch Connector
Zscaler Cloud Connector
Zscaler AI-powered capabilities
ZDX (Digital Experience Monitoring)
SSL/TLS inspection
Cloud Sandboxing
Advanced Threat Protection (ATP)
Intrusion Prevention (IPS)
Cloud Browser Isolation (CBI)
Data Loss Prevention (DLP)
ZIdentity
AWS, Microsoft Azure, Google Cloud Platform (GCP)
Splunk, Microsoft Sentinel, Palo Alto XSOAR
Terraform, Ansible, Python
Okta, Azure AD, Ping Identity

Benefits

Discretionary annual incentive program

The Team

Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Preferred Qualifications

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents (e.g., GPEN, GCSA)
Ability to conduct SASE vendor competitive analysis and advise clients on solution selection based on specific use cases and requirements (e.g., Zscaler vs. Palo Alto Prisma vs. Netskope)
Ability to conduct Zero Trust Architecture assessments and develop roadmaps aligning Zscaler capabilities to NIST SP 800-207 or CISA Zero Trust Maturity Model frameworks
Previous consulting or "Big 4" experience, with a track record of delivering enterprise network security or SASE transformation engagements

View full job page →

23d ago

Sr Lead Security Engineer

JPMorganChase Plano, TX

Plano, TX

23d ago

$171k - $260k/yr Full time Senior Ai Security API

Apply Now

Job Description

Join JPMorganChase in Plano, TX, where a benefits-rich environment, on-site wellness support, and a culture of collaboration empower you to make a meaningful impact in cybersecurity. Enjoy comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, and financial coaching as part of a thoughtful rewards program designed to support you and your family.

Benefits

Comprehensive health care coverage
On-site health and wellness centers
Retirement savings plan
Backup childcare
Tuition reimbursement
Mental health support
Financial coaching

Responsibilities

Provide ongoing technical guidance to support the business and its technical teams, contractors, and vendors
Develop secure, high-quality production code and review or debug code written by others
Clarify security requirements across multiple networks to enable multi-level security aligned with organizational needs
Collaborate with stakeholders and senior leaders to propose business modifications during periods of vulnerability
Serve as a function-wide subject matter expert in one or more focus areas; influence peers and project decision-makers to adopt leading-edge technologies
Apply reuse-first and AI-assisted practices within SDLC and toolchains to strengthen security testing, traceability, and alignment with resiliency and security expectations
Leverage enterprise-authorized AI capabilities to accelerate security risk analysis and documentation, synthesizing threat assessments with proper validation and data handling

Requirements

Formal training or certification with 5+ years of experience in cloud service development and integration; proficient in OAuth, SAML, API security, and identity federation; experience building high-performance API-first services and integrating tooling
Ability to plan, design, and implement enterprise security solutions with hands-on experience delivering system design, application development, testing, and operational stability
Advanced proficiency in one or more programming languages: C#, C++, Go, Python, Java
Extensive knowledge of software development processes with deep expertise in cloud, artificial intelligence, machine learning, or mobile domains; solid experience with threat modeling, vulnerability discovery, and penetration testing
Capability to tackle design and functionality problems independently with minimal oversight; strong knowledge of HTTP/HTTPS, SSL/TLS inspection, traffic interception, and API gateway patterns
Experience using enterprise-authorized AI capabilities to support security engineering workflows with rigorous validation and awareness of data sensitivity
Ability to review and validate AI-assisted security recommendations before adoption, ensuring alignment with security, resiliency, and auditability expectations

Technologies

OAuth
SAML
API security
Identity federation
C#, C++, Go, Python, Java
HTTP/HTTPS, SSL/TLS
API gateway patterns
API Gateway Development, Custom proxy
VPM development, SSE, CASB, SIEM
Cloud, Artificial intelligence, Machine learning, Mobile
Enterprise-authorized AI capabilities, AI-assisted security workflows

About JPMorganChase

JPMorgan Chase & Co is a long established financial institution delivering innovative solutions to millions of consumers, small businesses, and a wide range of corporate, institutional, and government clients under the J.P. Morgan and Chase brands. With a history spanning more than 200 years, the firm leads in investment banking, consumer and business banking, commercial banking, financial transaction processing, and asset management. The company offers a competitive total rewards package, including base salary determined by role, experience, and location, with eligibility for incentive compensation. A focus on diversity and inclusion informs all operations, and JPMorgan Chase is an Equal Opportunity Employer, including Disability/Veterans.

About the team

Our Corporate Functions span finance and risk, human resources, and marketing, forming an essential backbone that helps ensure the success of our businesses, clients, customers, and employees.

View full job page →

23d ago

Cyber Palo Alto Networks Security Engineer/ Senior Consultant, Strategy, Growth, and Transformation

Deloitte New York, NY

New York, NY

23d ago

$105k - $208k/yr Full time Analytics Cloud Architecture Cloud Platforms

Apply Now

Job Description

Deloitte is seeking a seasoned security engineer in New York who brings hands-on experience with Palo Alto Networks technologies to design, deploy, and optimize next-generation firewalls across both on-site and cloud environments. The role focuses on enabling zero-trust secure transformation by integrating NGFWs, Prisma Access, Panorama, and Strata into diverse infrastructures and workflows. This position sits at the intersection of security engineering and client advisory, delivering practical, scalable solutions for complex enterprise ecosystems.

Responsibilities

Design, deploy, and manage Palo Alto Networks Next-Generation Firewalls across on-premises and cloud platforms including AWS, Azure, and GCP
Implement and optimize Prisma Access features such as GlobalProtect, Prisma Agent, and Prisma Browser to support secure internet and remote access use cases
Administer Panorama and Strata Cloud Manager to provide centralized policy control, consistent configuration, and enhanced visibility
Configure and fine-tune security capabilities such as Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security, and SSL/TLS decryption policies
Develop client-ready solution designs, integrating Palo Alto components with SIEM/SOAR platforms and identity providers, with automation support via Terraform, Ansible, or Python

Required Qualifications

BA/BS in a technical field (e.g., Computer Science, Cyber Security, Information Technology) or equivalent work experience
PCNSE certification
5+ years of progressively responsible network security engineering experience with deep Palo Alto expertise and leadership
5+ years designing, deploying, and managing NGFWs in both on-premises and cloud environments (AWS, Azure, and/or GCP)
3+ years of hands-on experience with Prisma Access, including configuration of GlobalProtect, Prisma Agent, and Prisma Browser
3+ years of experience administering Panorama and Strata Cloud Manager
3+ years configuring and tuning Threat Prevention features (IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security)
3+ years implementing and troubleshooting SSL/TLS Decryption policies (forward proxy and inbound inspection, certificate management, decryption exclusions)
3+ years defining and managing security policies, including rule base optimization and policy lifecycle reviews
3+ years working with one or more major cloud providers and deploying VM-Series firewalls within cloud-native architectures
Ability to travel up to 50% on average
Limited immigration sponsorship may be available

Preferred Qualifications

Advanced cybersecurity certifications such as CISSP, CCIE Security, CCNP Security, or GIAC equivalents
Experience with automation tools (Terraform, Ansible, Python) for provisioning and policy management
Experience integrating Palo Alto Firewalls and Prisma with SIEM/SOAR platforms (e.g., Splunk, Microsoft Sentinel, XSOAR) via log streaming, APIs, or syslog
Experience designing and presenting Palo Alto network solution architectures tailored to client requirements
Proven experience in large, complex enterprise environments with strict security, compliance, and availability needs
Familiarity with identity provider integrations (Okta, Azure AD, Ping Identity) for SAML/SCIM in Palo Alto Cloud Identity Engine
Ability to conduct SASE vendor competitive analyses and advise on solution selections based on use cases
Experience performing Zero Trust Architecture assessments and roadmaps aligned with NIST SP 800-207 or CISA frameworks
Prior consulting or Big 4 experience delivering enterprise network security or SASE transformation engagements

The Team

Our Enterprise Security offering embeds security across digital transformation, securing a client’s technical backbone while enabling secure progress. The group covers security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products.

Technologies

Palo Alto Networks NGFW and related platforms
GlobalProtect, Prisma Access, Prisma Agent, Prisma Browser
Panorama, Strata Cloud Manager
Threat Prevention, IPS/IDS, Anti-Spyware, Antivirus, WildFire, DNS Security
SSL/TLS decryption policies, forward proxy, and inbound inspection
Terraform, Ansible, Python
SIEM/SOAR, AWS, Azure, GCP
VM-Series, Zscaler, Palo Alto Cloud Identity Engine
Okta, Azure AD, Ping Identity, SAML/SCIM
Splunk, Microsoft Sentinel, Palo Alto XSOAR

View full job page →

1mo ago

Senior Cybersecurity Engineer

One Federal Solution Washington, DC

Washington, DC

1mo ago Closed

Full time Senior Azure Azure Cloud

This position is no longer accepting applications (closed Jul 21, 2026).

Job Description

One Federal Solution is seeking a Senior Cybersecurity Engineer to provide technical direction and lead planning across cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust initiatives within federal mission environments. This onsite role in Washington, DC requires translating architectures into actionable plans and coordinating across contractor and stakeholder teams to deliver secure, compliant systems.

The position emphasizes turning complex security architectures into practical execution steps while guiding multi-disciplinary teams toward measurable outcomes in support of federal objectives.

Responsibilities

Provide overall technical direction across cybersecurity task areas, ensuring alignment with program goals and risk posture.
Lead technical planning and execution across cybersecurity, cloud engineering, agile DevSecOps, AI/ML, and Zero Trust initiatives, coordinating schedules, milestones, and cross-team dependencies.
Apply Federal, DHS, and IC cybersecurity architectures, standards, and technologies to guide design, implementation, and compliance.
Translate cybersecurity architectures, standards, technologies, and emerging practices into concrete technical plans, roadmaps, and measurable outcomes.
Oversee implementation of technical plans across contractor and stakeholder teams, ensuring quality, security, and timely delivery within federal requirements.

Requirements

Minimum 10 years of demonstrated cybersecurity engineering experience for projects of similar size and scope.
Knowledge of Federal, DHS, and IC cybersecurity architectures, standards, and technologies, with practical application in federal environments.
Knowledge of emerging cybersecurity practices and trends, including evolving threat landscapes and defensive strategies.
Active Top Secret/SCI clearance.
Mandatory certifications in AWS, CISSP, and Scrum practices, all in good standing at award and throughout the period of performance.