Zero Trust Engineer (R-00205)

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that those outcomes begin and end with our people, and that is what we have built a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top-tier services to our customers. Our culture and commitment have been recognized through numerous accolades, including being named one of the Best Places to Work in 2023 in two categories (“Prosperous and Thriving” ($5MM–$50MM in gross revenue) and “Mid-Atlantic Region” (DC, DE, MD, NC, VA, WV)), and again in 2025 as a Best Places to Work honoree. In addition, True Zero earned coveted spots on the Inc. 5000 list of fastest-growing companies in America in 2022, 2023, and 2025, a testament to our sustained growth driven by our people-first approach and unwavering dedication to excellence. The Endpoint Engineer – AI Desktop Deployment is responsible for designing, deploying, securing, and maintaining enterprise Windows endpoints that support AI-enabled desktop capabilities in highly regulated, government, and Zero Trust environments. This role combines traditional Windows desktop engineering with modern endpoint management, security compliance, application deployment, performance optimization, and device health monitoring. The engineer will work closely with cybersecurity, cloud, identity, infrastructure, and application teams to ensure endpoints are secure, compliant, performant, and ready to support AI-enabled applications and workloads. The ideal candidate has strong hands-on experience with Microsoft Intune, Microsoft Endpoint Manager, Windows 10/11, Group Policy, application packaging, and Zero Trust endpoint controls.

Job Responsibilities

• Assess applicability of prioritized enterprise Zero Trust Use Cases to assigned FISMA-reportable systems.
• Develop system-specific Engineering and Implementation Plans using reusable patterns and documented deviations.
• Prepare implementation schedules, test plans, deployment playbooks, pilot strategies, rollback considerations, and operational readiness criteria.
• Support technical implementation, architecture verification, regression testing, pilot execution, and validation of intended Zero Trust outcomes.
• Document implementation status, unresolved dependencies, architectural deviations, results, and lessons learned.
• Support transition of completed implementations into sustainable operations, governance, and RMF processes without assuming Government production authority.

Job Qualifications

• Bachelor’s degree in Computer Science, Engineering, Cybersecurity, Information Technology, or a related field.
• Five or more years of systems, security, cloud, network, identity, or application engineering experience.
• Hands-on experience implementing enterprise security capabilities in complex environments.
• Working knowledge of Zero Trust architectures, NIST SP 800-207, and Federal security requirements.
• Strong troubleshooting, testing, technical documentation, and cross-team coordination skills.
Preferred Qualifications:
• Experience with VA or other large Federal system environments.
• Experience with cloud, hybrid, legacy, and mission-critical systems.
• Experience supporting RMF or Assessment and Authorization transition activities.
Preferred Certifications:
• Security+
• CISSP
• CCSP
• Azure Security Engineer
• AWS Security Specialty