Zero Trust Architect Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI Employee Type: Regular-Long Term Assignment Percentage of Travel Required: Up to 10% Type of Travel: Local What You’ll Get to Do: CACI has an excellent opportunity for an experienced, self-directed, Zero Trust Architect. This position is in support of a Department of Defense (DoD) organization, USAFRICOM located OCONUS in Stuttgart, Germany. This position is required to travel OCONUS. Responsibilities: Zero Trust Architecture Design: Lead the design and implementation of a Zero Trust security architecture for the organization. Develop and implement strategies to ensure the least privilege access, micro-segmentation, and continuous monitoring of network traffic. Collaborate with cross-functional teams to integrate Zero Trust principles into existing and new systems. Identity and Access Management: Implement strong authentication and authorization mechanisms to verify user identities and ensure secure access. Design and implement role-based access controls (RBAC) and implement identity and access management (IAM) solutions. Monitor and audit user access to identify and mitigate potential security risks. Network Security: Implement network segmentation and micro-segmentation strategies to limit lateral movement. Design and deploy secure communication channels, including encryption and VPN solutions. Collaborate with network engineers to ensure secure configuration and monitoring of network devices. Endpoint Security: Design and implement endpoint protection strategies, including device posture assessment and continuous monitoring. Implement application control and device authentication measures. Work with IT teams to ensure security configurations on endpoints align with Zero Trust principles. Security Monitoring and Incident Response: Implement continuous monitoring solutions to detect and respond to security incidents. Develop and document incident response plans for Zero Trust environments. Conduct regular security assessments and penetration testing. Qualifications: BA/BS 7 years recent specialized or AA/AS 9 years recent specialized or a major cert 11 years recent specialized or 13 years of recent specialized experience Hold a current Top Secret/SCI clearance (no waiver) DOD 8570 IAT 2 compliance. Proven experience as a Zero Trust Architect or in a similar cybersecurity role. In-depth knowledge of cybersecurity principles, protocols, and best practices. Experience with identity and access management solutions, network security, and endpoint protection. Familiarity with cybersecurity frameworks, compliance standards, and regulations. Strong problem-solving and analytical skills. Relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Zero Trust Architect (CZTA) are a plus. TESA eligibility What We Can Offer You: We’ve been named a Best Place to Work by the Washington Post. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive benefits and learning and development opportunities. We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities. For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success. Company Overview: At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other protected characteristic. - ______________________________________________________________________________ What You Can Expect: A culture of integrity. At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation. An environment of trust. CACI takes pride in fostering a diverse and accessible culture where every individual feels supported to chart their own path. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality. A focus on continuous growth. Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy. Your potential is limitless. So is ours. Learn more about CACI here. ______________________________________________________________________________ Pay Range : There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here. The proposed salary range for this position is: $75,200 - 158,100 USD CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected characteristic.