9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence. Learn more about 9th Way Insignia at https://9thwayinsignia.com/.
Application password: Niner
9th Way Insignia works with the Veterans Administration (VA) to support the governance pillar in creating, implementing, and providing support for the necessary requirements and outcomes of the Zero Trust Architecture (ZTA) assessments. 9th Way Insignia will provide iterative updates for pillar use cases while accounting for a risk based and dependency-based priority of capabilities. The role requires familiarity with Cyber Security Tools, network topologies, intrusion detection, PKI, and secured networks, as well as experience in implementing cyber security regulations and ZTA.
The Technical Architect specializing in Zero Trust Architecture will play a pivotal role in fortifying the security of the federal agency’s digital assets and information systems. By implementing Zero Trust principles, the engineer will minimize the risk of data breaches, improve threat detection capabilities, and ensure that only authorized individuals have access to critical resources. This role not only enhances security posture but also contributes to the overall resilience of the agency in a landscape of ever-evolving cyber threats. The engineer will bring a proactive, forward-thinking approach to security, ensuring compliance with federal mandates while future-proofing the agency’s cybersecurity framework.
Clearance & onboarding
Be able to obtain a Public Trust and maintain compliance via privacy and security training annually.
Work setting
Fully Remote
Why this role exists
9th Way Insignia is engaged in a federal contract to help accelerate Zero Trust outcomes across a large, hybrid enterprise. This architect turns policy into working designs: you’ll capture the current state, sketch the target state, and help move real systems in that direction, without drowning anyone in jargon.
What you’ll do
- Draw the map. Produce enterprise and solution architecture views (conceptual to logical to physical) that follow TOGAF conventions. Build clean, high-fidelity diagrams in Microsoft Visio (or Archi/Lucid chart/draw.io) using ArchiMate and BPMN 2.0 where it clarifies flow and policy.
- Advance Zero Trust maturity. Assess current posture and recommend a staged roadmap using CISA ZTMM v2.0 pillars and crosscutting capabilities. Translate gaps into prioritized initiatives with measurable outcomes.
- Design practical ZT use cases. Document identity, device, micro segmentation, and policy decision patterns (PDP/PEP, ABAC) and guide them through governance to decision.
- Shepherd implementations. Turn use cases into implementation and test plans for cloud and on Prem systems; contribute to test reports and after-action findings.
- Report what matters. Build Power BI dashboards and monthly/quarterly scorecards with drilldowns by pillar/capability so leaders can see progress at a glance.
- Align to federal guidance. Ensure designs reflect NIST SP 800207 Zero Trust, OMB M2209, TIC 3.0, and relevant federal directives/handbooks.
- Work within RMF. Support system owners through control selection, inheritance, evidence, and continuous monitoring; account for FedRAMP baselines when cloud services are in play.
- Deliver accessibly. Make documents and diagrams of Section 508–conformant and consistent with Federal compliance.
Required qualifications
- 8+ years in enterprise/solution/security architecture for large, federated environments (federal experience preferred).
- Expert diagramming skills: Microsoft Visio (or Archi/Lucid chart/draw.io) with the ability to convey TOGAF level models clearly to both engineers and executives.
- Zero Trust depth: hands-on experience mapping designs to ZT pillars (Identity, Device, Network/Environment, Application/Workload, Data) and crosscutting areas (Visibility & Analytics, Automation & Orchestration, Governance).
- Network & cloud architecture: segmentation/micro segmentation, modern connectivity patterns (e.g., TIC 3.0), policy enforcement at multiple layers, workload identity, service-to-service auth.
- RMF literacy and collaboration with ATO stakeholders; familiarity with FedRAMP Rev. 5 control sets for cloud.
- Data & identity patterns: MFA, device posture, secrets management, key management, and lineage/classification considerations in ZT.
- Communication: concise technical writing, facilitation across PMO, pillar leads, vendors, and engineers; ability to brief options and tradeoffs.
Preferred
- Certifications: TOGAF 9/10, ArchiMate, CISSP/CCSP, CISM, PMP, ITIL 4.
- Modeling: ArchiMate 3.x, BPMN 2.0; experience maintaining an EA repository.
- Familiarity with DoD Zero Trust Reference Architecture v2 (as informative context for interagency alignment).
- Exposure to automation/orchestration (IaC, policy-as-code) and to NIST SP 800218 (SSDF) concepts for the application/workload pillar.
- Federal ecosystem familiarity (TRM, Enterprise Design/Security Patterns, VIP/VIPR, governance forums).
Tools & environments
Visio, Archi/Lucid chart/draw.io; Power BI; ServiceNow; MS Project, SharePoint, Teams; Azure Gov and AWS GovCloud; identity/policy engines; API gateways; SIEM/UEBA; SDWAN/SASE.
What success looks like in year one
- A living set of TOGA quality diagrams and an EA repository people actually use.
- A prioritized ZT roadmap and month-over-month improvements visible in dashboards.
- Two or more ZT use cases delivered from design through pilot with test evidence folded into RMF artifacts.
- Clean, 508 conformant deliverables that make leadership decisions easier.
9th Way Insignia’s range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
Clearance/Background Investigation
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
Benefits
Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.
Legal
We’re an equal employment opportunity employer that empowers our people to fearlessly drive change – no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.
Top Skills
What We Do
9th Way Insignia is a service-disabled veteran-owned small business (SDVOSB) that provides results-oriented technical solutions to the federal government. Led by experienced industry leaders, we bring software development, enterprise architecture, cybersecurity, enterprise IT, and data analytics capabilities to our customer base within the Departments of Veterans Affairs, Health and Human Services, Transportation, Commerce, and State.
