Data Security Architect, Zero Trust (TS/SCI) at Kentro

Tampa, Florida, United States -

Full Time

Start Date

Immediate

Expiry Date

23 Mar, 26

Salary

0.0

Posted On

23 Dec, 25

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Data Security, Zero Trust Architecture, Attribute-Based Access Control, Microsoft Purview, BigID, Kiteworks, NIST 8112, System Design Documents, Identity Management, Cloud Security, Data Classification, Cybersecurity, Information Security, Technical Authority, Enterprise Architecture, Compliance

Industry

IT Services and IT Consulting

Description

Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities. By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones. Kentro is hiring a visionary and authoritative Data Security Architect to serve as the lead technical authority for the USSOCOM Zero Trust Data Visibility, Labeling, and Governance program. As an architect within the Cross-Functional Integration Cell (CFIC), you will define the unified data security strategy that spans the Command’s entire Information Environment—from the hyperscale cloud capabilities of the NIPR network to the disconnected, on-premise constraints of the SIPR and Air-Gapped enclaves. In this high-visibility role, you will be responsible for defining the enterprise-wide data taxonomy and formally adopting the NIST Internal Report 8112 metadata schema. You will move the Command beyond simple file tagging to a complex Attribute-Based Access Control (ABAC) model, where access is brokered based on the pedigree, provenance, and verification status of user credentials. You will provide technical direction to the network-specific execution teams, ensuring that the implementation of Microsoft Purview (NIPR), BigID (SIPR), and Kiteworksremains architecturally coherent and aligned with the DoD Zero Trust Strategy. Responsibilities Enterprise Architecture Strategy: Serve as the Technical Authority for the Data Pillar, defining the high-level architecture for data discovery, classification, and protection across NIPR, SIPR, and Top Secret networks. Metadata & Taxonomy Design: Define and enforce the enterprise data taxonomy and metadata schemas (specifically adhering to NIST 8112) to standardize how "Trust Attributes" (Pedigree, Verifier, Assurance Level) are ingested and utilized for ABAC decisions. Cross-Enclave Integration: Ensure architectural consistency between the cloud-native NIPR stack (Microsoft Purview/Sentinel) and the on-premise SIPR/Top Secret stacks (BigID, Kiteworks, NetApp BlueXP), ensuring policy logic remains uniform even when tools differ. ABAC & Identity Integration: Design the integration points between the Data Pillar and the ICAM Pillar, defining the requirements for how User Attributes from SailPoint and Entra ID are consumed by Policy Decision Points (PDPs) like Kiteworks and Purview. Standards & Compliance: Lead the development of System Design Documents (SDDs) and validate that all architecture aligns with the USSOCOM Zero Trust Reference Architecture and DoD 8140/8570 compliance requirements. Location: Onsite in Tampa, FL Master's degree (MA/MS) in Computer Science, Information Security / Cybersecurity, Information Systems, Data Science, or a closely related technical field 15+ years of relevant experience Extensive experience acting as an Architect or Lead Engineer for large-scale DoD or Federal enterprise security transformations. Deep expertise in Zero Trust Architecture principles, specifically Data Object-Level Protection (DOLP) and Attribute-Based Access Control (ABAC). Proven experience designing architectures that utilize Microsoft Purview (Information Protection/DLP) and Digital Rights Management (DRM) technologies (e.g., Kiteworks, Virtru). Ability to design security solutions for Disconnected, Degraded, Intermittent, and Limited Bandwidth (DDIL) and air-gapped environments. Preferred Experience & Skills ("Nice-to-Haves") Experience with BigID for data discovery and NetApp BlueXP for storage-level classification. Knowledge of NIST Internal Report 8112 (Attribute Metadata) and its application to identity-centric security. Background in supporting USSOCOM or Special Operations Forces (SOF) missions. Certifications: Required: IAT III: CISSP-ISSEP (Information Systems Security Engineering Professional) OR CISSP. Preferred: One or more Cloud/Zero Trust Architecture certifications (e.g., CCSP, Microsoft Cybersecurity Architect SC-100). DoD 8570 Compliance: Must meet IAT Level III and IASAE II requirements. Clearance: Active Top-Secret clearance with SCI eligibility. The Company We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence. We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015) and two CMMI ML 3 ratings (DEV and SVC). Industry Recognition Growth | Inc 5000’s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C. Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner – Mid-Size Companies, Companies Owned by People of Color; Department of Labor’s HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award Benefits We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees – Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development. We work hard; we play hard. Kentro is committed to incorporating fun into every day. We dedicate funds for activities – virtual and in-person – e.g., we host happy hours, holiday events, fitness & wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We believe in appreciating your commitment and building a positive workspace for you to be creative, innovative, and happy. Commitment Equal Opportunity Employment & VEVRAA Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law. Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements. As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness. We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility. Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness. How to Apply To apply to Kentro Positions- Please click on the: “Apply for this Job” button at the bottom of this Job Description or the button at the top: “Application.” Please upload your resume and complete all the application steps. You must submit the application for Kentro to consider you for a position. If you need alternative application methods, please email careers@kentro.us and request assistance. Accommodations To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email careers@kentro.us.

Responsibilities

The Data Security Architect will define the enterprise-wide data taxonomy and adopt the NIST Internal Report 8112 metadata schema. They will also provide technical direction to execution teams to ensure alignment with the DoD Zero Trust Strategy.