Zero Trust Cloud Engineer
Skills
About the role
Zero Trust Engineer — Federal (Multiple Openings) Cratis Automation Solutions | Remote | Full-Time
About the Role
Cratis Automation Solutions is hiring Zero Trust engineers to support a federal program focused on achieving DoD Zero Trust compliance. These are implementation roles — not advisory. You will own your technical domain end to end, from design through evidence delivery, working inside a dedicated team with a clear mandate and a hard deadline.
We have multiple openings across the ZT stack. Candidates with strong depth in one or more of the areas listed below are encouraged to apply.
What You'll Do
Execute Zero Trust implementation activities across one or more ZT pillars (Identity, Device, Network, Data, App/Workload, Visibility & Analytics, Automation & Orchestration)
Design, configure, and document security controls aligned to the DoD ZT Assessment Framework
Author or contribute to Zero Trust Design Documents (ZTDDs) and Activity Implementation Plans (AIPs)
Build and maintain evidence packages to support ZTAF scoring and authorization activities
Integrate agency-owned tooling with DISA-provided services in a hybrid delivery model
Participate in sprint-based delivery cadence; contribute to backlog refinement and progress reporting
Technical Areas — Apply if You Have Depth In Any of the Following
Cloud Infrastructure: AWS GovCloud (IAM, Lake Formation, Macie, GuardDuty, Security Lake, KMS), Infrastructure as Code (Terraform / CloudFormation), CI/CD pipeline security controls
Identity & Access Management: ICAM federation, CAC/PIV, MFA enforcement, Privileged Access Management (PAM), Attribute-Based Access Control (ABAC), AWS Identity Center
Endpoint & Device Security: EDR platforms (CrowdStrike Falcon), device compliance baselines, device health attestation, EDR-SIEM integration
Network Security: Next-generation firewall policy (Palo Alto), Prisma Access, micro-segmentation, DNS security, network traffic inspection
Data Security & Governance: Data classification (Macie, Lake Formation), CUI/CDI labeling, DLP enforcement, Information Rights Management (IRM)
Security Analytics: SIEM engineering (Elastic), OCSF normalization, UEBA, GuardDuty findings integration, detection rule development
Compliance & Assessment: DoD ZT Assessment Framework, ATO evidence packaging, ZTAF scoring, RMF, NIST 800-207
Requirements
Active Top Secret (TS) clearance — required, no exceptions
7+ years of hands-on experience in cybersecurity, cloud security, or federal IT
Demonstrated implementation experience
Familiarity with DoD cybersecurity frameworks (NIST 800-207, DISA STIGs, RMF)
Strong written communication — you will produce technical documentation as a core part of this role
Ability to work independently in a fully remote environment with minimal hand-holding
Nice to Have
AWS certifications (Solutions Architect, Security Specialty) — GovCloud experience strongly preferred
DoD 8140 / 8570 certifications (CISSP, CEH, Security+, etc.)
Prior ZT implementation experience on a federal program
Compensation
Competitive salary commensurate with clearance level, experience, and technical depth. 100% remote. Contract position.
Pay: $130,000.00 - $220,000.00 per year
Benefits:
401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Professional development assistance
Retirement plan
Vision insurance
Work Location: Remote
Questions about this role
How do I apply to this Zero Trust Cloud Engineer role at Cratis Automation Solutions?
Click "Apply with AI Applyd" above. We auto-fill the application from your resume and answer screening questions in seconds. No copy and paste, no juggling tabs.
What's the typical salary for DevOps / SRE in your country?
Compensation varies by seniority, employer size, and location. When this listing publishes a salary band you'll see it in the badge row above the description.
How fast does AI Applyd auto-apply?
Most applications complete in under 90 seconds. You can track the status in your dashboard and watch the screenshot proof land the moment the application submits.
What ATS does Cratis Automation Solutions use?
AI Applyd supports Greenhouse, Lever, Ashby, Workday, iCIMS, SmartRecruiters, LinkedIn Easy Apply, and most other ATS platforms. If we can submit through the platform, we do.
Want AI Applyd to auto-apply to roles like this?
We tailor your resume per posting, fill the forms, and track replies for you.