Zero Trust Security Engineer

ASRC Federal provides technology-driven solutions to more than 30 U.S. federal defense and civilian agencies, supporting critical missions such as space exploration, cyber defense, and public health. The organization combines leading-edge technology with deep domain expertise in areas including IT modernization, software and analytics, engineering, critical infrastructure, base operations, professional services, and supply chain logistics. ASRC Federal’s work contributes to an enduring future for over 14,000 Iñupiat shareholders from Alaska’s North Slope, aligning mission success with community impact. Team members help enable initiatives like assembling the Orion spacecraft, advancing federal cloud and cybersecurity, and ensuring safer air travel. ASRC Federal is recognized as a Great Place to Work™, a Military Times “Best for Vets” employer, and holds a VETS Indexes 4-Star Employer Rating.The Zero Trust Security Engineer will design, implement, and maintain Zero Trust architectures and controls to protect critical systems and data for federal missions. This full-time hybrid role is based in Quantico, VA, with flexibility for some work from home. Day-to-day responsibilities include assessing existing security frameworks, defining Zero Trust policies, and integrating identity, access, and segmentation controls across networks, applications, and cloud environments. The engineer will collaborate with cybersecurity, network, and application teams to develop secure solutions, perform risk assessments, and support compliance with federal security standards and directives. The role also involves monitoring security posture, responding to security incidents, developing documentation and runbooks, and providing technical guidance on Zero Trust best practices to stakeholders.Minimum Requirements: Minimum of 5 years of hands-on experience administering, configuring, and supporting the Okta Identity Cloud platform in an enterprise or federal environment.IAM Expertise: Strong understanding of identity-centric security, directory services (Active Directory, LDAP), and modern federation protocols (SAML 2.0, OIDC, OAuth 2.0).Active Top-Secret Clearance REQUIRED, eligible to be upgraded to TS/SCIMust meet 8570 certification requirements at the time of hire. IAT Level II (e.g., Security+ CE, CCNA Security, CySA+, GICSP, GSEC, SCCP or higher tiered 8570 certificationBachelor’s Degree, in Cybersecurity, Information Systems Management or a related field or an equivalent combination of military service and/or at least five (5) years of significant, relevant work experienceDesired Certifications: Official Okta certifications are highly desired:Okta Certified ProfessionalOkta Certified AdministratorOkta Certified Consultant or Okta Certified Developer (plus)