Jobs at True Zero Technologies, LLC

Design, deploy, secure, and maintain enterprise Windows endpoints (Windows 10/11) supporting AI-enabled desktop capabilities. Administer Intune/Endpoint Manager, implement STIG-compliant baselines, configure Conditional Access and Zero Trust controls, automate provisioning with Autopilot and PowerShell, integrate endpoint telemetry with security tools, and support audits and compliance in government cloud environments.

Design and execute AWS GovCloud migrations using the 7 Rs, plan migration waves, automate infrastructure with Terraform, ensure secure hybrid connectivity and Zero Trust controls, validate performance and operational readiness, and support modernization to container and cloud-native platforms.

Design, build, deploy, and operate AI/ML capabilities in AWS GovCloud using FedRAMP-authorized services. Responsibilities include data preparation, model development, evaluation, deployment, monitoring, RAG implementations, embedding/vector search integration, Python development of production services, containerized deployments, CI/CD, and collaboration with engineering and cybersecurity teams to meet mission and compliance requirements.

Design, implement, and operate an enterprise secrets management platform. Onboard applications, automate credential lifecycle (provisioning, rotation, revocation), integrate with AWS services and CI/CD, enforce least-privilege IAM policies, implement PKI and FIPS-compliant cryptography, monitor/audit access, and support GovCloud and DevSecOps integrations.

Design, implement, and operate enterprise IAM/ICAM platforms across on-prem, cloud, SaaS, and hybrid environments. Implement automated provisioning, federation (SAML/OIDC/OAuth/SCIM), PAM, IGA, PIV/CAC and phishing‑resistant MFA. Integrate AWS identity services, enforce least‑privilege access and FICAM alignment, automate workflows, monitor/authentication events, perform access reviews, and collaborate with cross‑functional teams to onboard and secure applications.

Design, deploy, and maintain enterprise PKI and certificate lifecycle automation across Windows, Linux, cloud, containers, applications, and network devices. Implement ACME automation, integrate AWS Private CA/ACM and HSMs, support FPKI/DoD PKI and CAC/PIV, enable mTLS and Zero Trust, establish governance, monitoring, inventory, and troubleshooting processes, and collaborate with security, cloud, identity, and application teams.

Designs, automates, and operates secure enterprise AWS (including GovCloud) and hybrid-cloud environments. Builds IaC, CI/CD and GitOps pipelines, manages Kubernetes/EKS/ECS and container platforms, executes cloud migrations, administers RHEL/Windows servers, enforces DoD/FedRAMP security controls, provides Tier III operations, and leads engineering teams supporting mission-critical government workloads.

Extract, clean, and transform data from multiple sources; build and optimize dashboards and reports; perform root cause analysis and statistical modeling; collaborate with leaders and Data Engineers to translate business needs; streamline data workflows and perform database migrations and schema mapping.

Analyze enterprise vulnerability and exposure data to prioritize real-world cyber risks for NIH. Correlate KEVs, threat intelligence, attack paths, and asset criticality; validate penetration findings; recommend remediation priorities; support RMF/POA&M activities; and produce technical and executive exposure assessments to drive risk-based remediation.

Design and implement automated workflows and integrations to support RMF/A&A and continuous monitoring. Automate evidence collection, control validation, reporting, and dashboards; integrate GRC platforms, vulnerability management, SIEMs, and ticketing systems; collaborate with RMF analysts and ISSOs to improve cybersecurity governance and authorization readiness.

Monitor and maintain network infrastructure, detect and troubleshoot outages and performance issues, escalate incidents, perform routine maintenance and controlled changes, document incidents and changes, and collaborate with teams to improve network availability and resilience.

Lead development of enterprise cybersecurity metrics, dashboards, and executive reporting. Aggregate and analyze data from vulnerability management, incident response, RMF, CDM, penetration testing, and threat intelligence to produce risk profiles, support FISMA reporting, and inform leadership. Validate data with technical teams, maintain reporting processes, and recommend automation and metric improvements to enhance operational visibility and program performance.

Design and implement data-centric cybersecurity solutions: develop ML algorithms and automation for security tools; discover, parse, map, and transform legacy RMF artifacts into OSCAL; migrate and analyze security data; reproduce dashboards/workflows in eGRC; collaborate with Professional Services; produce migration assessments and reports.

Lead enterprise vulnerability management and CDM for NIH: run and direct vulnerability scanning across infrastructure, cloud, endpoints, network, and applications; prioritize using exploitability, KEVs, threat intelligence, and mission impact; coordinate remediation, track POA&Ms and RMF processes; produce executive dashboards and liaise with pen test, incident response, and stakeholders.

Lead daily cybersecurity operations across vulnerability management, incident response, RMF, security engineering, ISSO, policy, and continuous monitoring. Coordinate cross-functional teams, manage schedules and deliverables, track risks and metrics, drive process improvements, support Government reviews, and act as escalation point during incidents and transitions.

Develop, document, and maintain RMF policies, procedures, process maps, templates, and governance artifacts. Translate regulatory requirements into workflows, gather stakeholder inputs, support authorization documentation (SSPs, POA&Ms, risk assessments), maintain version control and metrics, and support audits, governance boards, and implementation of RMF processes.

Lead end-to-end database migration projects across on-prem, cloud, hybrid, relational and non-relational systems. Plan migration strategies, perform schema mapping and conversions, implement replication and change data capture, minimize downtime with HA techniques, conduct cutovers and rehearsals, validate post-migration, and develop rollback/contingency plans. Collaborate with teams and address technical risks and compatibility issues.

Own and manage the end-to-end RMF lifecycle and transition current-state workflows to a standardized, target-state GRC/RMF platform. Lead requirements gathering, translate processes into system configurations, validate migrations, establish governance, coordinate testing and UAT, develop training, monitor authorization timelines and POA&M remediation, and provide leadership reporting and continuous improvement recommendations.

Manage and improve the PMO Quality Management System, ensure compliance with CMMI/CMMC/ISO/NIST frameworks, coordinate audits and evidence collection, track CAPA and remediation, monitor government contract deliverables, maintain compliance documentation and repositories, support PMO governance, and produce compliance and executive reporting.

The Senior Cyber Threat Intelligence Analyst is responsible for analyzing and disseminating threat intelligence, mentoring junior analysts, and enhancing threat detection capabilities.