True Zero Technologies, LLC

Security Engineer

• Lead secure cloud and hybrid architectures, baselines, continuous monitoring, security-tool administration, configuration management, audits, and operational improvement
• Conduct cybersecurity modernization, Zero Trust, security architecture, and security engineering activities
• Perform architecture, tool, configuration, process, readiness, and gap assessments across on-premises and cloud environments
• Develop implementation roadmaps, strategies, metrics, dashboards, schedules, risk registers, and technical recommendations
• Perform incident analysis, cost and performance optimization, documentation, and training
• Coordinate with stakeholders and communicate with Government personnel
• Support SecDevOps or network-focused assignments as specified by the PWS

Cloud Security Engineer

• Apply Zero Trust principles and authoritative guidance, including OMB M-22-09, CISA's Zero Trust Maturity Model, NIST SP 800-207, and Executive Order 14028.
• Evaluate CBP architectures, tools, configurations, and procedures to document the current security posture and identify modernization gaps.
• Develop and maintain Zero Trust implementation and optimization roadmaps across identity, devices, networks, applications, workloads, data, visibility, automation, and governance.
• Assess technologies and recommend tools, configurations, and implementation priorities that improve Zero Trust maturity.
• Track modernization risks, issues, blockers, metrics, schedules, dashboards, and mitigation actions for Government leadership.
• Develop technical and nontechnical documentation, briefings, architecture views, operational views, network diagrams, and online knowledge content.
• Coordinate working groups and stakeholders to clarify responsibilities, resolve architecture issues, and align modernization efforts across CBP OIT.

Security Modernization Specialist

• Lead reviews of network security architectures, designs, firewall requests, trust-zone transfers, and security controls for least privilege and policy compliance.
• Lead development and maintenance of LAN, WAN, cloud-network, SD-WAN, and ACI security standards, diagrams, designs, and transition documentation.
• Administer, configure, tune, secure, and sustain network security tools, devices, sensors, IDS/IPS, SIEM feeds, firewalls, proxies, and CDM capabilities.
• Support security investigations, incident containment and recovery, troubleshooting, and root-cause analysis for network-related issues.
• Identify network security and performance gaps, recommend corrective action, and conduct alternatives analyses, trade studies, and technology evaluations.
• Develop network security policies, awareness materials, training, signature-management records, maintenance reports, and performance reports.

Networking Security Engineer

Application Engineer

• Lead the administration, configuration, maintenance, tuning, and security of CBP application systems throughout the software lifecycle.
• Create and maintain application operations and maintenance procedures, tuning guidance, and software maintenance recommendations.
• Support ISSOs during ATO and ATT activities by producing and maintaining required application security documentation and evidence.
• Perform weekly application security impact assessments and evaluate proposed software, products, and emerging technologies.
• Maintain continuous application monitoring, critical-incident alerting, operational status reporting, and service-request tracking.
• Apply configuration management and change-control procedures to application baselines, configuration items, engineering changes, and deployment records.
• Improve application logging, integrate relevant data with SIEM and vulnerability-management processes, and support remediation tracking.

Application Security Engineer

Engineer

• Design and implement enterprise Zscaler Private Access (ZPA) architectures, including App Connector placement, redundancy, capacity planning, application segments, access policies, and naming standards.
• Configure and harden the ZPA tenant using least-privilege administrative roles, appropriate administrator authentication requirements, and secure platform configuration standards.
• Develop and implement Zscaler Client Connector configurations that coexist with third-party agency VPN clients.
• Design and support Client Connector and ZPA Browser Access solutions.
• Engineer DNS and application access configurations, including internal FQDN design, connector-side DNS resolution, application segmentation, and controls preventing external agencies from directly accessing internal DNS infrastructure.
• Validate end-to-end brokered application connectivity through Zscaler and the enterprise data center to protected applications.
• Integrate ZPA with enterprise identity services, including SAML federation with Okta and identity/group mappings.
• Configure Zscaler Log Streaming Service (LSS) and integrate ZPA activity and security logging with Rapid7 InsightIDR or comparable SIEM platforms.
• Develop repeatable migration procedures for onboarding organizations and applications, including publishing, identity/group mapping, VPN or tunnel cutover, validation, rollback, and decommissioning.
• Produce detailed as-built documentation covering the production ZPA tenant, App Connectors, application segments, policies, security hardening, and supporting configurations.
• Develop operational runbooks and troubleshooting procedures.
• Provide technical guidance, knowledge transfer, train-the-trainer sessions, and post-deployment hypercare support to internal engineering and security teams.

ZScaler Engineer – part-time

• Design, implement, and maintain end-to-end Datadog observability solutions across cloud and on-premises environments
• Build and maintain dashboards, SLOs, and intelligent alerting policies
• Implement and tune monitoring for healthcare applications and infrastructure, including EHR/EMR, HL7/FHIR interfaces, and clinical systems
• Configure log pipelines, custom metrics, and telemetry ingestion using Datadog Agent, OpenTelemetry, and APIs
• Partner with SRE and engineering teams to detect, triage, and resolve incidents
• Drive root-cause analysis and post-incident reviews using Datadog tooling
• Integrate Datadog with ITSM, CI/CD, security tooling, and Tanium endpoint/asset data
• Manage Datadog configuration as code using Terraform or the Datadog API/CLI
• Optimize Datadog usage, tagging, data retention, cost, and performance
• Ensure observability practices align with HIPAA, NIST SP 800-53, and Zero Trust requirements
• Deliver technical reports on system health, performance trends, and reliability posture
• Engage clients and stakeholders throughout the project lifecycle
• Coach and mentor junior engineers on observability best practices and Datadog capabilities
• Develop data models, machine learning capabilities, analytical workflows, and cybersecurity automation across enterprise data sets
• Collaborate with SOC personnel, threat hunters, threat intelligence analysts, penetration testers, digital forensics personnel, and cybersecurity engineers

Cloud Security Engineer

Security Modernization Specialist

Networking Security Engineer

Application Security Engineer

ZScaler Engineer – part-time

Observability Engineer, Part Time