Zero Trust Architect

When you join the Cambridge team, you are part of a skilled and talented global community that is united by a set of core values: commitment, integrity, and perseverance. Join our team and help us confront today’s most threatening and complex obstacles!

Cambridge International Systems, Inc. has a full-time Zero Trust Architect opportunity available based in Moehringen, Germany.

Qualified candidates for this job must possess a current DoD TS/SCI security clearance and meet TESA accreditation requirements. TESA Certification allows employees to be tax exempt for both Germany and the US, in addition to other great perks.

Employees may be eligible for relocation reimbursement, housing allowance, COLA, and school reimbursement for dependents.

ROLE RESPONSIBILITIES

• Zero Trust Architecture Design:
  • Lead the design and implementation of a Zero Trust security architecture for the organization.
  • Develop and implement strategies to ensure the least privilege access, micro-segmentation, and continuous monitoring of network traffic.
  • Collaborate with cross-functional teams to integrate Zero Trust principles into existing and new systems.
• Identity and Access Management:
  • Implement strong authentication and authorization mechanisms to verify user identities and ensure secure access.
  • Design and implement role-based access controls (RBAC) and implement identity and access management (IAM) solutions.
  • Monitor and audit user access to identify and mitigate potential security risks.
• Network Security:
  • Implement network segmentation and micro-segmentation strategies to limit lateral movement.
  • Design and deploy secure communication channels, including encryption and VPN solutions.
  • Collaborate with network engineers to ensure secure configuration and monitoring of network devices.
• Endpoint Security:
  • Design and implement endpoint protection strategies, including device posture assessment and continuous monitoring.
  • Implement application control and device authentication measures.
  • Work with IT teams to ensure security configurations on endpoints align with Zero Trust principles.
• Security Monitoring and Incident Response:
  • Implement continuous monitoring solutions to detect and respond to security incidents.
  • Develop and document incident response plans for Zero Trust environments.
  • Conduct regular security assessments and penetration testing.

Required QUALIFICATIONS

• BA/BS + 5 years recent specialized or AA/AS +7 years recent specialized or a major cert + 9 years recent specialized or 11 years of recent specialized experience.
• Extensive experience supporting Microsoft Azure and Microsoft 365.
• Experience in systems infrastructure design, support, and administration.
• Experience working with Microsoft Azure and Microsoft 365 in a hybrid environment.
• Azure AD, storage, and compute including Application Proxy (NDES), Storage Account, Virtual Machines, Virtual Desktop, Backup, Automation, and Functions.
• Azure identity management including SSO (SAML), OAuth, MFA, RBAC, PIM, conditional access, monitoring/alerting, device registration, identity protection, and hybrid identity management/AD connect.
• Azure networking including ExpressRoute, VNet, Virtual WAN, VPN, NSG, Load Balancer, BGP, routing, and firewall concepts (Palo Alto, etc.).
• Experience collaborating with technical teams of diverse IT-related skill sets.
• IAT-III Level Certification (CISSP, CASP+, CISM, etc.).
• Microsoft Certified Azure Administrator Associate or Developer Associate.
• Must possess an active TS/SCI security clearance.
• Must be proficient in using different technologies such as computers and other tools and systems pertinent to the position.

DESIRED QUALIFICATIONS

• Ansible and Infrastructure as Code programming skills.
• Advanced automated script design, coding, debugging, and maintenance skills (using bash, python, etc.).
• Experience in CI/CD toolsets (e.g., Terraform, Jenkins, GitLab, etc.).
• Experience with Containerization (Docker) and Container Orchestration (Kubernetes).
• Azure Solutions Architect Expert Certification.

TRAVEL REQUIREMENTS

• Ability to travel up to 10%. In some occasions, overnight travel may be required.
• Active Passport in support of OCONUS travel and/or living requirements.

PHYSICAL ENVIRONMENT AND WORKING CONDITIONS

• Cambridge International Systems complies with Temporary Duty Station (TDY)/Outside Continental United States (OCONUS) vaccination requirements.
• Must be able to work in an office environment, sitting at a desk, looking at a computer for most of the workday.
• Work is physically comfortable; the employee has discretion about sitting, walking, standing, etc.
• May be required to travel short distances to offices/conference rooms and buildings on site.

BACKGROUND CHECKS

Please note that any offer of employment is contingent upon a background investigation. In connection with working on certain federal contracts, a drug screen may also be required.

BENEFITS AND PERKS

Cambridge International Systems is committed to investing in our employees and their future by providing them with competitive compensation, career development opportunities, comfortable working conditions, and a comprehensive benefits package, some of which are listed below:

• Medical, dental, vision, Life/AD&D/STD/LTD insurance.
• 401(k) matching and immediate vesting.
• Paid time off and holidays.
• Generous tuition & training assistance program.
• Relocation assistance.
• Sign-on bonuses.
• Referral bonuses.
• Performance-based bonuses.
• Community involvement & outreach.
• Wellness program.
• Employee Assistance Program (EAP).
• Tickets at Work.

If you know someone who may be interested, please share this posting. We are a growing team and there may be more opportunities like this one here at Cambridge International Systems! Depending on the recruiting difficulty of the position and other factors, successful referrals resulting in a hire may qualify for a referral bonus. Both employees and non-employees are eligible! Ask the Recruiter for more info.

MORE ABOUT US

At Cambridge, we recognize innovation and agility grow through diverse collaboration. Our team is comprised of unique individuals, and it is our policy to provide equal opportunity in recruiting, hiring, training, and promoting individuals in all job categories without regard to race, color, religion, national origin, gender, age, disability, genetic information, veteran status, sexual orientation, gender identity, or any other protected class or category as may be defined by federal, state, or local laws or regulations. It is our firm intent to support equal employment opportunity and affirmative action in keeping with applicable federal, state, and local laws and regulations.

If you are a qualified individual with a disability or a disabled veteran requiring assistance with the application process, please visit for information on how to request assistance.

#J-18808-Ljbffr