The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
ZERO TRUST (ZT) NETWORK ARCHITECTURE SME
Arlington, VA · On-site
$120 - $160/hr
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro‑ and micro‑segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
ZERO TRUST (ZT) NETWORK ARCHITECTURE SME
Arlington, VA · On-site
$120 - $160/hr
The expected outcome is a continuously advancing Networks pillar maturity posture with network macro‑ and micro‑segmentation maturing, ZTNA architecture advisory driving enforcement design, and ...
Principal Network Technician
Leesburg, VA · On-site
$120K - $155K/yr
As a Principal Network Technician at SILTT, you are a master of physical infrastructure and the lead technical executor for our "Network Operations" pillar. You are responsible for the physical ...
Quick apply
Principal Network Technician
Leesburg, VA · On-site
$120K - $155K/yr
As a Principal Network Technician at SILTT, you are a master of physical infrastructure and the lead technical executor for our "Network Operations" pillar. You are responsible for the physical ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
Arlington, VA · On-site
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
Arlington, VA · On-site
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
Arlington, VA · On-site
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
Arlington, VA · On-site
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
Arlington, VA · On-site
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
Arlington, VA · On-site
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
ZERO TRUST (ZT) ENDPOINT & CONNECTED SYSTEMS SME
$120K - $165K/yr
Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions. * Review device-related policy ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
Develop recommended identity pillar inputs to the ZT roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with device, network, and ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME
Arlington, VA · On-site
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME
Arlington, VA · On-site
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT ...
Arlington, VA · Remote
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT ...
Arlington, VA · Remote
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME
Arlington, VA · On-site
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval.Collaborate with Identity, Network, and Data SMEs to ensure ...
Quick apply
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME
Arlington, VA · On-site
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval.Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT ...
Arlington, VA · Remote
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT ...
Arlington, VA · Remote
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME
Arlington, VA · On-site
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMENT SME
Arlington, VA · On-site
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMEN[...]
Arlington, VA · On-site
$130 - $160/hr
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
ZERO TRUST (ZT) APPLICATION DEVELOPMENT SECURITY SME (VIRTUALIZATION AND APPLICATION DEVELOPMEN[...]
Arlington, VA · On-site
$130 - $160/hr
... pillar inputs to the ZT Roadmap, IG CIGIE maturity reporting, and enterprise performance reporting for agency review and approval. * Collaborate with Identity, Network, and Data SMEs to ensure ...
Pillar Network information
What is a Pillar Network?
How does working within the Pillar Network team typically involve collaboration across different departments?
What are the key skills and qualifications needed to thrive as a network engineer, and why are they important?
What is the difference between Pillar Network vs Network Engineer?
| Aspect | Pillar Network | Network Engineer |
|---|---|---|
| Certifications | CCNA, CompTIA Network+ | CCNA, CompTIA Network+ |
| Work Environment | Data centers, enterprise networks | Corporate offices, data centers |
| Industry Usage | IT, telecommunications, data services | IT, telecommunications, network infrastructure |
While both roles involve network infrastructure, a Pillar Network typically refers to a core component or foundational network element within a larger system, often managed by specialists. A Network Engineer designs, implements, and maintains these networks. The roles overlap in certifications and work environments, but Pillar Network emphasizes the core network element, whereas Network Engineer focuses on overall network design and troubleshooting.
What are popular job titles related to Pillar Network jobs in Virginia?
For Pillar Network jobs in Virginia, the most frequently searched job titles are:
What job categories do people searching Pillar Network jobs in Virginia look for?
The top searched job categories for Pillar Network jobs in Virginia are:
What cities in Virginia are hiring for Pillar Network jobs?
Cities in Virginia with the most Pillar Network job openings:

Full-time
Re-posted 3 days ago
Job description
POSITION OVERVIEW
The Zero Trust Network Architecture Technical SME exists to serve as the agency's primary technical advisor for the CISA ZTMM v2.0 Networks pillar. This role advances TSA's network segmentation posture, TIC 3.0 compliance, and ZTNA adoption by providing senior-level advisory on network architecture design, micro-segmentation strategy, and software-defined networking (SDN) capabilities. The expected outcome is a continuously advancing Networks pillar maturity posture with network macro- and micro-segmentation maturing, ZTNA architecture advisory driving enforcement design, and lateral movement risk proactively identified and addressed. This is a senior technical advisory role requiring hands-on network architecture and ZTNA design experience in a federal environment.
DUTIES & RESPONSIBILITIES
General Duties
- Serve as the primary technical advisor for the CISA ZTMM v2.0 Networks pillar across network security architecture, segmentation, and ZTNA domains.
- Continuously assess the agency's network architecture against CISA ZTMM v2.0 Networks pillar criteria and NIST SP 800-207; proactively identify emerging network risk indicators, including lateral movement exposure, traffic encryption and visibility deficiencies, and TIC 3.0 compliance drift, and deliver real-time advisory recommendations.
- Provide technical advisory guidance on ZTNA architecture design options, micro-segmentation strategies, and SDN approaches, recommending solutions and implementation pathways for agency decision-making.
- Evaluate ZTNA platform capabilities (e.g., Zscaler, Palo Alto Prisma) and develop configuration and deployment recommendations aligned to federal ZT requirements for agency adoption.
- Advise TIC 3.0 compliance strategies, cloud network access patterns, and secure remote access approaches in a hybrid federal environment; develop recommended solutions for agency review.
- Assess network access control mechanisms, lateral movement risk, and east-west traffic enforcement against ZT principles; develop findings and recommended remediation approaches for agency concurrence.
- Provide advisory support for the development and maturation of Networks pillar entries in the Common Control Catalog (CCC), ensuring traceability to NIST SP 800-53 Rev. 5 control families.
- Develop recommended Networks pillar inputs to the ZT Roadmap, IG FISMA maturity reporting, and enterprise performance reporting for agency review and approval.
- Collaborate with Identity, Device, Data, and Applications SMEs to ensure network enforcement approaches integrate coherently across all ZTMM pillars.
- Review network-related policy documents and technical standards; identify gaps relative to ZT mandates and develop recommended updates for agency concurrence.
- Support all network-related ZT data calls, audits, and compliance reporting by providing advisory analysis and recommended responses.
- Prepare and present network architecture findings, maturity assessments, and advisory recommendations to senior leadership and the CISO.
- Leverage AI-assisted analysis tools, automation platforms, and prompt engineering techniques to enhance advisory productivity, accelerate gap analysis and documentation tasks, and enable focus on higher-value technical advisory work; apply all AI capabilities in accordance with agency acceptable use policies and Zermount's ethical AI use guidelines.
SUBJECT MATTER EXPERTISE
SME Area #1 - Network Security Architecture, ZTNA & Micro-Segmentation Advisory
- Expert-level mastery of network security architecture including ZTNA design, micro-segmentation strategy, and software-defined networking demonstrated through production deployment or senior advisory engagement.
- Authoritative knowledge of CISA ZTMM v2.0 Networks pillar criteria, NIST SP 800-207 network access tenets, TIC 3.0 use cases and security capabilities, and NIST SP 800-53 Rev. 5 control families.
- Expert-level proficiency with ZTNA platforms such as Zscaler and/or Palo Alto Prisma at architecture design, configuration, and deployment depth for federal environments.
- Expert-level capability in network segmentation design including macro-segmentation, micro-segmentation, lateral movement risk assessment, and east-west traffic enforcement strategy.
- Independent decision-making authority on Networks pillar advisory scope, architecture assessment methodology, and recommended ZTNA and segmentation approach. Bring solutions for concurrence.
- Problem-solving at the intersection of network enforcement and cross-pillar ZT integration. Able to identify how network segmentation deficiencies create risk in Identity enforcement decisions and Applications access control.
SME Area #2 - Enterprise Network Infrastructure & Cloud Networking Foundations
- Deep foundational expertise in enterprise network architecture including routing and switching (BGP, OSPF, VLAN design), firewall policy management, VPN technologies, and load balancing at architecture or senior engineering level.
- Hands-on experience with enterprise network infrastructure platforms (Cisco, Palo Alto Networks, Fortinet, or equivalent) including firewall rule design, segmentation architecture, and traffic inspection configuration.
- Strong working knowledge of cloud networking constructs, including VPC/VNet design, cloud-native security groups, transit gateways, and cloud-based SD-WAN, Infrastructure-as-Code (IaC), and hybrid connectivity patterns relevant to ZT network enforcement.
- Foundational understanding of database network access patterns, systems administration network dependencies, and application-layer traffic flows as they relate to segmentation design and ZT enforcement policy.
- Supports Network pillar advisory by enabling technically credible engagement with agency network engineers, firewall administrators, and cloud infrastructure teams.
- Interacts directly with other Zero Trust SMEs.
QUALIFICATIONS
Minimum Requirements
- A minimum of 10 years of experience in network security architecture, ZTNA design, or enterprise network engineering with demonstrated Zero Trust scope.
- Demonstrated hands-on experience designing or implementing ZTNA architectures in federal or large enterprise environments, reflecting operational design and deployment, not vendor evaluation or documentation.
- Hands-on experience with ZTNA platforms (e.g., Zscaler, Palo Alto Prisma, Cisco) including architecture design, configuration, and deployment.
- Expert knowledge of NIST SP 800-207, CISA ZTMM v2.0 Networks pillar criteria, and TIC 3.0 requirements.
- Experience with micro-segmentation design, SDN, and lateral movement risk assessment in a ZT context.
- Ability to assess network security controls against NIST SP 800-53 Rev. 5 control families.
- Demonstrated experience designing and implementing Zero Trust network architectures operationally, not limited to assessments or gap analyses.
- Experience supporting ZT-related IG FISMA metrics reporting pertaining to network security and TIC 3.0.
- Strong written and oral communication skills; ability to translate complex network architecture concepts into CISO-ready findings.
- Demonstrated familiarity with AI-assisted analysis tools or prompt engineering; ability to apply AI capabilities ethically to accelerate advisory work and surface higher-value technical insights.
Preferred Qualifications
- Five years of IT cybersecurity experience, including direct support to the U.S. Government. This experience can be concurrent with the minimum 10 years of network architecture experience.
- Prior direct involvement in a ZT Networks pillar implementation or enterprise ZTNA deployment in a technical architecture or advisory capacity.
- ZTNA vendor certification: Zscaler Zero Trust Certified Associate (ZTCA) or Palo Alto Networks PCNSE.
- Experience with encrypted traffic management (SSL/TLS inspection) and east-west traffic visibility in a ZT network environment.
- Experience with cloud-native networking security (Azure Virtual WAN, AWS Transit Gateway, GCP Cloud Armor, or Infrastructure-as-Code) in a federal hybrid environment.
Competencies
- Technical: CISA ZTMM v2.0 Networks pillar, NIST SP 800-207, TIC 3.0, Zscaler, Palo Alto Prisma, Cisco, ZTNA architecture, micro-segmentation, BGP/OSPF/VLAN, VPN, firewall policy design, cloud networking (VPC/VNet), NIST SP 800-53, AI-assisted analysis.
- Leadership: Technical advisory leadership for Networks pillar; cross-pillar SME coordination with Identity, Devices, and Applications teams; CISO-facing network architecture briefing; engagement with agency network engineers and cloud infrastructure teams.
- Behavioral: Proactive continuous network posture monitoring; precision in architecture assessment and segmentation advisory; continuous learning toward evolving ZTNA platform capabilities, TIC 3.0 updates, and federal network security guidance.
Education & Certifications
- Minimum of a Bachelor of Science (or higher) in Information Technology, Computer Science, Network Engineering, Cybersecurity, or related field.
- Required: Certified Information Systems Security Professional (CISSP) or Cisco Certified Network Professional Security (CCNP Security), or equivalent certification.
- Strongly preferred: Certified Information Security Manager (CISM) or equivalent senior security management certification.
- Strongly preferred: ZTNA vendor certification. Zscaler ZTCA, Palo Alto Networks PCNSE, or equivalent.
Clearance Level
- Active Secret Clearance required.
WORK LOCATION
- Hybrid - Primarily Remote. Occasional onsite work required at the client location in Springfield, VA and Zermount HQ in Arlington, VA.
HOURS OF OPERATION
- Business Hours: 8:00 AM EST - 4:30 PM EST
- Core Hours: 9:00 AM EST - 3:00 PM EST
REPORTING STRUCTURE
- Reports To: ZT SME Team Leader
- Direct Reports: None