Job Description
Everforth ECS is seeking a Senior Zero Trust Compliance Officer to work in the National Capital Region covering the Pentagon, Falls Church, and Fairfax. Please Note: This position is contingent upon contract award.
The War Data Platform (WDP) is a key initiative within the U.S. Department of War's (DoW) AI-First strategy introduced in early 2026. The WDP separates business and financial data from operational warfighting data, aiming to accelerate the deployment of artificial intelligence (AI) on the battlefield. The WDP extends to Unclassified, Secret, and Top Secret environments, and supports collaboration between Combatant Commands, Joint Staff directorates, Senior Executive Service leaders, and operational analysts.
• The Senior Zero Trust Compliance Officer serves as WDP's senior-level authority for translating Zero Trust technical implementations into defensible, audit-ready authorization artifacts aligned with the DoW Zero Trust Reference Architecture, DoW Zero Trust Strategy, and NIST Special Publication 800-207. This role directly supports WDP's cybersecurity authorization lifecycle across Unclassified, Secret, and Top Secret environments, ensuring that Zero Trust compliance posture remains current, transparent, and mission-enabling at every stage of the WDP security authorization continuum.
• Designs, documents, and validates Zero Trust compliance across DoW mission systems operating on unclassified and classified networks.
• Translates Zero Trust technical implementations into defensible authorization artifacts aligned with DoW guidance, NIST control families, and the DoW Zero Trust Reference Architecture.
• Evaluates identity-centric access controls, network micro-segmentation, continuous authentication mechanisms, and encrypted traffic protections for compliance sufficiency and audit readiness.
• Maintains System Security Plans, Security Assessment Reports, and Plans of Action and Milestones reflecting Zero Trust capabilities using eMASS, Xacta, and controlled SharePoint repositories.
• Conducts Zero Trust maturity assessments, traces capability alignment to control objectives, and documents compliance posture for review by Authorizing Officials, Senior Information Security Officers, and Component cybersecurity leadership.
• Coordinates with cybersecurity engineers, network teams, and system owners to reconcile technical configurations with authorization requirements.
• Reviews vulnerability findings, control assessment results, and continuous monitoring outputs to validate Zero Trust control effectiveness.
• Produces compliance dashboards, executive summaries, and evidence packages supporting authorization decisions and mission risk awareness.
• Supports inspections, penetration testing reviews, and governance boards through structured documentation and authoritative briefings.
• Advances program values of mission assurance, audit transparency, cyber resilience, and operational trust by delivering consistent compliance alignment between Zero Trust engineering and security authorization outcomes.
• Performs other duties as assigned.