Zero Trust / Security Engineering SME

Altamira Technologies Corporation has a long and successful history providing innovative solutions throughout the U.S. National Security community. Headquartered in McLean, Virginia, Altamira serves the defense, intelligence and homeland security communities by focusing on creating innovative solutions leveraging common standards in architecture, data and security.

Altamira believes that our people and the culture of our company differentiate us from other companies. We focus on recruiting talented, self-motivated employees that strive to find a way to get things done.

Position Overview

Altamira is seeking a Zero Trust / Security Engineer to support the design, implementation, and operation of secure cloud and platform environments for mission-critical systems. This role focuses on identity and access management, secrets management, authentication and authorization frameworks, and Zero Trust architectures within classified environments.

The ideal candidate brings strong experience in cloud security, DevSecOps practices, and enterprise identity systems, and is comfortable collaborating with platform, infrastructure, and application teams to embed security into all phases of system development and operations.

Key Responsibilities

• Design and implement Zero Trust security architectures in cloud and hybrid environments
• Configure and manage identity and access management systems, including Keycloak and OAuth2-based solutions
• Implement and operate secrets management platforms such as HashiCorp Vault
• Develop and enforce authentication, authorization, and access control policies
• Integrate security controls into CI/CD and DevSecOps pipelines
• Support system hardening, vulnerability management, and security compliance activities
• Monitor and respond to security events, incidents, and anomalies
• Conduct security assessments, reviews, and risk analyses
• Collaborate with engineering teams to implement secure-by-design solutions
• Support accreditation, authorization, and audit processes
• Develop and maintain security documentation, standards, and runbooks

Required Qualifications

• Ability to obtain TS/SCI clearance
• Bachelor’s degree in Cybersecurity, Computer Science, Engineering, or related field (or equivalent experience)
• Experience in cybersecurity, DevSecOps, or security engineering roles
• Experience implementing IAM and authentication systems
• Hands-on experience with secrets management and secure credential handling
• Experience supporting cloud-based and hybrid security architectures
• Strong understanding of network, application, and identity security principles
• Experience working in compliance-driven environments (e.g., RMF, NIST, STIGs)
• Strong troubleshooting and incident response skills
• Ability to work effectively in secure, mission-focused environments

Preferred Qualifications

• Certified Kubernetes Application Developer (CKAD) Certification
• Experience with HashiCorp Vault and Keycloak in production environments
• Experience with Kubernetes security and container hardening
• Experience implementing Zero Trust frameworks in DoD or IC environments
• Familiarity with OpenTelemetry, SIEM, and security monitoring platforms
• Experience with infrastructure and configuration automation (Terraform, Ansible, etc.)
• Relevant certifications (CISSP, CCSP, Security+, AWS Security Specialty, etc.)
• Prior experience supporting DoD or Intelligence Community programs