Security Architect - Zero Trust
Innosoft Corporation · Bethesda, MD
$190,000
Jul 12, 2026
Bethesda, MD
Jul 21, 2026
What this job asks for AI summary
A full-time, remote-first federal contracting role serving as the technical authority for security architecture at NIH's Office of the Director. The core work involves designing and documenting Zero Trust architectures across cloud and on-premises environments, authoring privileged access standards, and advising the CISO on security engineering and modernization. It suits an experienced security architect with a strong federal background and a track record of producing formal, government-approved architecture deliverables.
Senior level · 10+ years · Remote · Bachelor's required · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 820 people nationally plausibly meet what this posting asks for (information security analysts). range 170–1,450
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
The caller has directed that this be treated as fully remote with no metro inferred, overriding the posting's 'remote-first with periodic on-site in Bethesda, MD' language.
Clearance is listed as 'Tier 2 Public Trust (MBI-5B) — must obtain and maintain.' This is a federal background investigation suitability determination, not a DoD security clearance (Confidential/Secret/TS), so the clearance requirement is set to None. Hiring managers should note the Public Trust requirement is a hard gate for this position.
The certification requirement is stated as 'CISSP-ISSAP (or CISSP plus SABSA/TOGAF with documented Zero Trust delivery).' CISSP-ISSAP is treated as the primary name with CISSP as an alternative; SABSA/TOGAF are listed separately as preferred since they serve as substitution qualifiers for the ISSAP specialization, not standalone requirements.
The posting requires hands-on command of 'at least four of' the listed security tools (SIEM, EDR, NGFW, WAF, DLP, PAM, IDS/IPS, CASB/cloud security). All are marked required since they appear under the Requirements section, but the 'at least four' framing means a candidate need not hold all of them — hiring managers should evaluate breadth across the set rather than requiring every tool.
The posting notes 'WE have room on this' next to the certification requirement, suggesting some flexibility on the CISSP-ISSAP/SABSA/TOGAF gate in practice.
Cloud security architecture certifications (CCSP, AWS/Azure security specialty) appear under Preferred Qualifications.
SOAR, AI-security overlays, and NIST AI RMF 1.0 exposure appear under Preferred Qualifications tied to SOW 5.10 AI/ML requirements.
This is a GSA MAS Key Personnel position tied to a federal task order running through August 2031; the incumbent cannot be replaced without Contracting Officer consent, which is an unusual contractual constraint worth surfacing to candidates.
Ignored 4 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Zero Trust architecture, NIST SP 800-207, OMB M-22-09, NIST SP 800-53.
Caller marked this a fully-remote role — scored against the national candidate pool.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.