zero-trust jobs in San Diego

This is a hands-on Solution Architect role for an AI-enabled Managed Services team, requiring deep technical expertise in designing end-to-end application architectures spanning UI, APIs, services, data, and AI components. The role combines hands-on coding and prototyping with architecture ownership, emphasizing active participation in codebases, AI tool evaluation, and guiding engineering teams through complex technical decisions.…See more Key responsibilities include designing reference architectures for AI patterns (RAG, vector search, prompt orchestration), defining non-functional requirements (performance, reliability, security), architecting CI/CD pipelines, and ensuring production readiness. The ideal candidate has 8+ years of software engineering experience, strong cloud-native and modern application architecture knowledge, practical AI feature development, and comfort working directly in code and infrastructure.

Director-level hands-on technical leader responsible for designing, implementing, and operating enterprise infrastructure across AWS, Azure, and Microsoft 365 environments. Will personally architect and troubleshoot complex hybrid cloud, networking, identity, endpoint, and workplace solutions while leading infrastructure teams, managing vendors, budgets, and roadmaps.…See more Must establish engineering standards for Zero Trust, disaster recovery, and business continuity while partnering across security, application, data, and business teams. Requires 15+ years of progressive infrastructure and platform engineering experience, 7+ years leading technical teams, and deep expertise in AWS services, Microsoft 365 (Entra ID, Exchange, Teams, SharePoint, Intune, Defender), Azure, Infrastructure as Code, and automation.

Systems Network Engineer II will design, configure, and troubleshoot Layer 2/3 networks, firewalls, VPNs, and network security controls in cloud and on-premises environments. The role requires strong foundational networking skills including TCP/IP, routing, switching, VLANs, and hands-on troubleshooting of connectivity and performance issues.…See more The engineer will document network topology, maintain security posture through hardening and access controls, and collaborate with cloud, cybersecurity, and infrastructure teams. Preferred experience includes cloud networking (AWS/Azure/GCP), Kubernetes/container networking, infrastructure automation (Terraform/Ansible/Python), and Zero Trust architecture.

The Cyber Security Analyst develops and maintains assessment documentation, performs ongoing compliance assessments using tools like ACAS, SCAP, and Trellix, and conducts security audits and Site Based Security Assessments (SBSAs) of NCS Family of Systems. The role requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+ with appropriate CE/OS), and expertise in Risk Management Framework (RMF) v3/v5, System Security Plans (SSPs), POA&Ms, STIG remediation, and eMASS.…See more Responsibilities include patching verification, configuration and change management compliance, incident reporting, continuous monitoring, and potential appointment as Information System Security Officer (ISSO) within 6 months.

This is a hands-on DevSecOps engineering role focused on designing and maintaining secure CI/CD pipelines, software supply-chain controls, and Kubernetes deployment standards. The engineer will work across Azure DevOps, Nexus, SonarQube, and container orchestration to integrate security and quality checks into build and release workflows, support platform engineering teams, and enable developers with documentation and automation.…See more Responsibilities include implementing SAST, SCA, dependency scanning, secrets management, artifact controls, and compliance alignments (NIST, CMMC, RMF, Zero Trust); troubleshooting pipeline and deployment failures; and creating runbooks and guardrails. The role requires 5+ years in DevOps/DevSecOps, hands-on Azure DevOps and Kubernetes experience, scripting proficiency, and an active Secret Clearance with eligibility for TS/SCI.

The IT Manager will lead all IT infrastructure, cybersecurity, and regulatory compliance operations for a healthcare organization. Key responsibilities include designing and maintaining secure cloud, network, and endpoint systems; serving as the HIPAA compliance authority; establishing incident response procedures; managing vendor and third-party risk; and providing executive advisory on technology strategy and risk.…See more The role demands extensive IT/cybersecurity leadership experience, deep HIPAA and healthcare data-protection expertise, and the ability to build compliance frameworks and security controls from the ground up.

Principal System Architect responsible for designing and maintaining a complex enterprise automation ecosystem spanning RPA, Machine Learning, and GenAI across multiple business units. The role requires architecting data pipelines integrating diverse systems (SAP, ERP, QMS, PLM tools like Windchill), leading automated workflow solutions (ECPs, QA defect prediction, EVMS reporting), and ensuring end-to-end cybersecurity compliance with DoD standards, CMMC, and Zero Trust architectures.…See more This is a senior technical leadership position requiring 14+ years of IT system architecture experience, deep expertise in intelligent automation and ML/AI, and the ability to mentor teams and present technical strategies to executive stakeholders.

Technology Manager reporting to a chief technology officer, responsible for defining enterprise architecture strategy, governing technical standards across applications, data, infrastructure, security, and AI/automation. Oversee architectural solution delivery, lead architecture quality assurance and governance, and manage a technical team while balancing multiple concurrent projects.…See more Translate business objectives into scalable, secure, cloud-native designs aligned with zero-trust principles and NIST controls.

Lead the security architecture for satellite onboard systems, designing secure boot chains, attestation mechanisms, and trust boundaries across hardware, firmware, and payload compute. You will conduct threat modeling, implement Hardware Root of Trust solutions (TPM, secure elements, eFuse), manage firmware signing processes, and develop incident response procedures for onboard system compromise.…See more The role requires close collaboration with hardware and firmware teams to embed security best practices throughout the platform development lifecycle, plus mentoring and recruiting for the security organization.

Cloudflare seeks a Senior Customer Engineer to serve major accounts in the Southwest, acting as a trusted technical advisor on enterprise network and security architectures. The role combines deep consultative skills with hands-on technical expertise across Internet fundamentals, security, performance, and developer platforms—translating complex technical concepts into business outcomes for both engineering teams and C-suite executives.…See more The engineer will demonstrate architectural breadth in at least four domains (OSI layers, BGP, WAF, Zero Trust, caching, AI/LLM workflows, scripting, or cloud-native development) and drive customer adoption through technical enablement, custom integrations, and solutions design. This is a quota-carrying, revenue-aligned customer-facing role requiring exceptional communication, SaaS business acumen, and the ability to navigate full-lifecycle enterprise sales cycles.

IT Manager responsible for end-to-end IT operations at a mid-sized organization, including infrastructure administration, security, incident response, and disaster recovery. Oversees Windows Server, Active Directory, Microsoft Exchange DAG, virtualization, SAN storage, and Azure hybrid environments.…See more Leads IT projects from scoping to delivery, manages vendor relationships, owns cost optimization, and supervises IT team members while ensuring business continuity and SOC 2 compliance.

Cloud Engineer III will design, deploy, and sustain secure cloud solutions across AWS, Azure, and government cloud environments (GovCloud, Azure Government) for mission-critical defense applications. The role requires deep expertise in cloud architecture, distributed systems, Infrastructure as Code, CI/CD pipelines, DevSecOps, containerization (Docker, Kubernetes), and cloud-native patterns.…See more You will work across cross-functional teams including engineers, cybersecurity personnel, and government stakeholders to architect hybrid cloud, edge-to-cloud, and enterprise platform solutions meeting DoD compliance standards (Impact Levels, Zero Trust, RMF, STIGs). Responsibilities include automating infrastructure, configuring security controls, managing cloud networking and identity, and communicating technical decisions and risks to technical and executive audiences.

As a Cybersecurity Systems Engineer, you will develop and implement security solutions to protect military infrastructure, performing risk and vulnerability assessments across networks, systems, and applications. You'll work with Navy Risk Management Framework (RMF) processes, manage security controls and compliance testing using tools like eMASS and ACAS, and identify cyber threats using vulnerability scanning and big-data analytics.…See more The role requires 3+ years of DoD/government IT experience, expertise in RMF/A&A activities, and hands-on knowledge of Windows, Linux, cloud platforms, network infrastructure (routers, switches, firewalls, NIPR/SIPR), and security compliance tools. You'll communicate security complexities to diverse audiences and deliver client solutions from inception through completion.

The Network Engineer IV delivers advanced afloat C4ISR network engineering, integration, and sustainment for the Navy's carrier training tactical system within the CANES architecture. The role maintains, configures, and troubleshoots ruggedized network hardware and software baselines while providing hands-on technical support to shipboard ITs and NIWC Pacific during Fleet training events, readiness exercises, and deployment workups.…See more Responsibilities include system updates, patching, baseline management, virtualization support, enclave routing, cybersecurity compliance (STIG application, HBSS/ACAS remediation, Zero Trust hardening), and functional/performance testing with documentation of findings. The engineer must hold or obtain a Secret clearance, possess CCNA/CCNP and DoD 8570 IAT Level II (Security+), and have 3–5 years of network engineering experience with preferred expertise in Ansible, Python, Bash, PowerShell, and DevSecOps automation.

As Principal Network Engineer reporting to the Director of Engineering & Technology, you will develop network architectures for tactical and enterprise systems, implementing security protocols (HAIPE, IPsec, TLS) and dynamic routing (OSPF, EIGRP, BGP, MANET). You'll oversee multi-million-dollar programs with rigorous technical baselines, mentor cross-functional engineering teams, translate customer requirements into system designs, and serve as the technical voice in executive and customer engagements.…See more Key responsibilities include WAN/LAN/WLAN design, DoD RMF compliance, emerging technology adoption (AI-enabled orchestration, zero-trust), and strategic roadmap development.

The Software Installation Engineer conducts onsite software installations and system configurations at customer facilities, performing data migrations, system verifications, and testing across project iterations. The role requires hands-on expertise in Linux administration, networking hardware (routers, switches, firewalls), infrastructure-as-code tools, and security frameworks, with responsibility for troubleshooting, quality control implementation, and project documentation.…See more This individual will travel to customer sites to support installations, coordinate with project teams, and maintain compliance with security standards (RMF, STIGs, NIST controls).

A Senior Endpoint Engineer will stand up and manage Microsoft 365 (Exchange Online, SharePoint, Teams, Entra ID) and endpoint management platforms (Intune, Jamf) from scratch in a startup environment. Responsibilities include designing IT onboarding/offboarding workflows, implementing endpoint security policies (EDR, disk encryption, patch management, conditional access), managing vendor relationships and budgets, and providing Tier 1/2 technical support.…See more The role requires 4+ years of hands-on IT operations or systems administration experience, deep proficiency with Microsoft 365 and MDM/UEM platforms, strong networking fundamentals, and scripting ability (PowerShell, Bash, or Python); must support SOC 2 and ISO 27001 compliance.

Lead a team of IT systems engineers architecting, deploying, and securing enterprise server infrastructure across Windows, Linux, virtualization, and cloud environments. Design and operate Active Directory and hybrid identity solutions at scale, manage enterprise endpoint management with SCCM, and guide virtualization and hyperconverged infrastructure modernization.…See more Serve as primary technical authority providing hands-on mentoring, engineering reviews, and on-site technical advising to government clients on system architecture, modernization strategy, and mission-critical implementation planning.

Design and implement secure, scalable cloud and hybrid edge-to-cloud architectures supporting Department of Defense mission-critical capabilities across AWS GovCloud, Azure Government, and on-premises environments. Lead DevSecOps pipeline implementation, ensure compliance with DoD cloud standards (ILs 4, 5, 6+), Zero Trust, and RMF requirements across multi-classification environments.…See more Provide technical leadership to software engineers, platform engineers, cybersecurity professionals, and government stakeholders on modernizing data deployment, security, and delivery for distributed maritime operations.

Senior Network Engineer supporting U.S. Navy afloat (shipboard) networks, providing break/fix IT support, cybersecurity patching, and technical troubleshooting in a fast-paced military environment.…See more Requires hands-on administration of Cisco switching/routing, Windows Server, and Linux systems; root-cause analysis; and coordination with Active Duty personnel and government staff. Must hold an active Secret clearance, be able to obtain TS/SCI, and meet DoD IAT Level II certification requirements. Role includes 25% travel, frequent onsite shipboard support, and occasional after-hours availability.

This role performs continuous security monitoring, compliance assessments, and authorization documentation for Department of Defense information systems. The analyst will use tools like ACAS, SCAP, and eMASS to execute Risk Management Framework processes, conduct security audits, manage Plans of Action and Milestones (POA&Ms), and coordinate STIG remediation with system engineers and administrators.…See more The position requires 5–8 years of cybersecurity experience, current DoD 8140-compliant IAT II certification (Security+), and deep knowledge of RMF, system security plans, and automated compliance scanning. The analyst must be able to work independently, manage competing priorities, and be appointed Information System Security Officer (ISSO) within six months.

Cloud Engineer II supporting DevSecOps pipeline implementation, CI/CD workflows, automated security scanning, container deployment, and secure software delivery. Will assist with cybersecurity compliance activities including RMF documentation, Zero Trust alignment, vulnerability remediation, and audit-ready technical artifacts.…See more Requires 9+ years experience (or 7+ with Master's, or 4+ with PhD/JD), active Secret clearance, and ability to obtain TS/SCI. Must coordinate across architects, engineers, developers, cybersecurity teams, and government stakeholders to track tasks, troubleshoot issues, and communicate technical decisions and risks.

As a Cloud Engineer II, you will support DevSecOps pipeline implementation including CI/CD workflows, automated security scanning, configuration management, and container deployment. You'll assist with cybersecurity and compliance activities such as RMF documentation, Zero Trust alignment, vulnerability remediation, and audit-ready technical artifacts.…See more You'll coordinate across architects, engineers, developers, cybersecurity teams, and program stakeholders to track tasks, troubleshoot issues, and communicate status and risks. The role requires 9+ years of experience (or equivalent with advanced degree), an active Secret clearance, and the ability to obtain TS/SCI.

Design and lead hybrid edge-to-cloud architectures integrating tactical edge, on-premises, and cloud environments across AWS GovCloud, Azure Government, and containerized platforms. Architect solutions compliant with DoD cloud standards (Impact Levels 4–6+), Zero Trust, RMF, and multi-classification security requirements.…See more Implement DevSecOps pipelines with CI/CD, Infrastructure as Code, automated security scanning, and secure deployment practices. Provide technical leadership to engineers, developers, cybersecurity personnel, and government stakeholders through architecture reviews, risk identification, and executive briefings.

The Network Engineer IV delivers advanced tactical network engineering, integration, and sustainment for the Navy's carrier training system (CANES architecture), ensuring reliable data transport, system interoperability, and secure performance. The role maintains, configures, and troubleshoots shipboard and afloat network hardware and software, supports Fleet training readiness exercises, and provides hands-on technical leadership across NIWC Pacific and shipboard IT teams.…See more Responsibilities include system updates, patching, virtualization management, cybersecurity compliance (RMF, STIG, HBSS/ACAS), and functional/performance testing with occasional underway periods. The engineer must hold or obtain an active Secret clearance (TS/SCI preferred), possess DoD 8570 IAT Level II and CCNA/CCNP certifications, and demonstrate expertise in Linux, Windows Server, Cisco IOS/NX-OS, Juniper JUNOS, and infrastructure automation.