Senior Zero Trust Engineer (Data Pillar SME) Skytech Consultancy Services Baltimore, MD Job Details Full-time $135,000 a year 20 hours ago Qualifications Technical engineering Cloud infrastructure Fed

RAMP FISMA

Data governance Bachelor's degree NIST standards Technology advisory Regulatory Frameworks (Architecture security) IT governance planning Cloud compliance Stakeholder management Full Job Description We are seeking Senior Zero Trust Consultant & Subject Matter Expert (SME) specializing in the Data Pillar of the CISA Zero Trust Maturity Model (ZTMM). Operating within our Zero Trust Program Management Office (ZTA PMO), this role partners with the ZTA Project Manager to drive strategic planning, governance, and business process development. This is an advisory and coordination role; it does not require direct technical tool implementation, coding, or system configuration. The ideal candidate will possess deep expertise in federal mandates (OMB

M-22-09, CISA ZTMM

v2.0, NIST

SP 800-207/207A

) to guide gap analysis, transition roadmaps, and stakeholder alignment.

Location :

Woodlawn, MD Key Responsibilities PMO Integration & Project Support Technical Advisor:

Serve as the PMO's dedicated Data Pillar SME, tracking modernization activities alongside the ZTA Project Manager.

Technical Translation:

Convert complex engineering findings, system designs, and vendor capabilities into PMO deliverables (e.g., project plans, milestones, dependencies, risk registers).

Governance & Briefings:

Support PMO governance, sprint planning, and workstream prioritization; provide technical insights during leadership briefings and vendor reviews. Implementation Gap Analysis & Advisory (Core Function) Assess ZTMM v2.0

Core Functions:

Lead comprehensive Zero Trust gap analyses across agency data repositories, cloud environments, and on-premises infrastructure.

Evaluate Data Capabilities:

Measure current maturity against

CISA ZTMM

v2.0 Data functions, advising on:

Data Inventory Management:

Methods to discover, track, and record organizational data assets.

Data Categorization & Access:

Strategies for sensitivity classification, tagging, and granular least-privilege permissions.

Data Encryption & Availability:

Cryptographic controls (rest/transit/use) and resilient data redundancy workflows.

Information Protection:

Frameworks to monitor, prevent, and mitigate data leaks or unauthorized exfiltration.

Assess Cross-Cutting Integration:

Coordinate how Data controls integrate with Visibility & Analytics (SIEM/SOAR logs), Automation & Orchestration (automated labeling/enforcement), and Governance (data policies/compliance reports).

Roadmaps & Design Review:

Formulate transition pathways to advance the agency from "Traditional" toward the "Optimal"

CISA ZTMM

maturity state; review implementation team designs for

NIST SP 800-207

compliance.

Stakeholder Coordination & Process Modernization Cross-Team Collaboration:

Act as the primary liaison for the Data pillar between the ZTA PMO, cyber engineering teams, data governance bodies, and operations units.

Process Modernization:

Identify outdated data workflows and facilitate technical working groups to resolve cross-pillar engineering dependencies (e.g., Data controls integrated with Identity and Device pillars). Minimum qualifications

Overall Experience:

10+ years of professional experience in IT engineering, enterprise architecture, or federal IT consulting.

Cybersecurity Focus:

6+ years of dedicated experience in cybersecurity engineering, data protection, or cyber risk advisory.

Advisory & Frameworks:

Proven senior advisory experience within an Enterprise PMO, aligning agency strategies with

OMB M-22-09, CISA ZTMM

v2.0, and

NIST SP 800-207.

Federal Compliance:

Strong understanding of FedRAMP cloud security requirements and FISMA risk management frameworks impacting enterprise data governance.

Education:

Bachelor's degree in Cybersecurity, IT, Computer Science, Data Management, or a related field (master's preferred).

Clearance:

Ability to obtain and maintain a Federal Public Trust clearance (Active clearance preferred).

Technical & Soft Skills Data Protection Concepts:

Deep conceptual understanding of DLP, Data Classification/Labeling, EDRM, data encryption standards, and architectural integration with Identity (ICAM), Device, and Network pillars.

Project Facilitation:

Strong experience in PMO environments using Agile/Scrum; working knowledge of MS Office Suite and ServiceNow for tracking tasks and documentation.

Communication:

Exceptional ability to translate highly technical engineering jargon into clear business risk and project concepts for non-technical PMs and executives.

Pay:

$135,000.00 per year

Work Location:

In person