Cyber Security Engineer

PUNCH Cyber Analytics Group

. Define and maintain the organization’s Zero Trust security architecture and strategy aligned with business and security objectives .

Posted 10/13/2026full-timeRemote • Virginia • United StatesSeniorLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Zero Trust security architecture, including the development of roadmaps, maturity models, and implementation plans. Proficient in identity-centric security controls, endpoint security, and compliance with NIST 800-53 standards.

Highest-signal resume keywords

Zero Trust Security ArchitectureNIST 800-53 ComplianceIdentity-Centric Security ControlsNetwork SegmentationCloud Security Integration

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Zero Trust RoadmapsMaturity ModelsPolicy-Based Access ControlsData ClassificationEncryptionContinuous MonitoringEndpoint SecurityDevice ComplianceMicro-SegmentationSecurity Telemetry

Soft Skills

Team CollaborationFlexibilityProblem Solving

Tools & Technologies

CiscoJuniperRiverbedFortinet

Certifications & Qualifications

Position of Public Trust

Industry Keywords

Identity GovernanceLeast-Privilege AccessData Loss Prevention (DLP)Multi-Cloud EnvironmentsHybrid-Cloud Security

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Define and maintain the organization’s Zero Trust security architecture and strategy aligned with business and security objectives
Provide recommendations regarding the Agency's perimeter UTM devices in accordance with NIST 800-53 and industry best practices for Cisco, Juniper, Riverbed, and Fortinet
Develop Zero Trust roadmaps, maturity models, and implementation plans across people, processes, applications, data, devices, and infrastructure
Establish identity-centric security controls, including strong authentication, MFA, SSO, identity governance, and least-privilege access
Design network segmentation and micro-segmentation to limit lateral movement and reduce attack surfaces
Implement continuous verification of users, devices, workloads, applications, and network connections
Define policy-based access controls using identity, device posture, risk, location, application, and behavioral signals
Establish device trust and endpoint security requirements, including device compliance, health checks, encryption, patching, and EDR coverage
Develop data-centric security controls, including data classification, encryption, DLP, access governance, and rights management
Define security telemetry and continuous monitoring requirements to support real-time risk-based access decisions
Integrate Zero Trust controls with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments
Assess existing infrastructure against Zero Trust maturity frameworks and reference architectures, such as NIST Zero Trust Architecture
Identify security gaps, vulnerabilities, architectural risks, and legacy dependencies that prevent Zero Trust adoption
Create architecture standards, patterns, reference designs, and security requirements for engineering and project teams
Continuously evolve the architecture based on new threats, technologies, business requirements, and emerging Zero Trust capabilities

Requirements

What you’ll need

7 years of experience with a bachelor’s degree or 9 years of total experience
Ability to work in both an individual and team environment
Flexibility to support after hours maintenance activities
Must be able to obtain a Position of Public Trust
Experience or knowledge of Zero Trust security architecture and strategy
Knowledge of NIST 800-53 and industry best practices
Knowledge of Cisco, Juniper, Riverbed, and Fortinet devices
Ability to develop Zero Trust roadmaps, maturity models, and implementation plans
Knowledge of identity-centric security controls, MFA, SSO, identity governance, and least-privilege access
Knowledge of network segmentation and micro-segmentation
Knowledge of continuous verification and policy-based access controls
Knowledge of endpoint security, device compliance, encryption, patching, and EDR
Knowledge of data classification, encryption, DLP, access governance, and rights management
Knowledge of security telemetry and continuous monitoring
Experience with cloud, hybrid-cloud, SaaS, on-premises, and multi-cloud environments
Knowledge of NIST Zero Trust Architecture and related maturity frameworks
Ability to identify security gaps, vulnerabilities, architectural risks, and legacy dependencies

Benefits

Comp & perks

Unique benefits and personal touches to provide a positive work-life experience
Inc. Magazine ‘Best Workplaces’ award recognition