Device Pillar Security LeadJob ID#: 26-1135
Clearance: U.S. citizen; must obtain and keep DHS/USCIS suitability (Public Trust). Active clearance a plus.
Location: Hybrid/ Herndon, VA
What You'll Do:
Lead the device side of a large federal Zero Trust program at USCIS. As our Device Pillar Security Lead, you'll define what "Advanced" and "Optimal" maturity look like under CISA ZTMM v2.0. You'll then make it real by determining device health from Intune, CrowdStrike and Zscaler to who gets access to what, in real time. You'll work with the Windows, Mac and iOS teams, ICAM (identity and access), the SOC and agency leadership. You'll shape the strategy and also see it enforced.
Responsibilities will include but are not limited to:- Device pillar strategy (30%): Own the agency's device maturity baseline, KPIs and roadmap across all 8 functions, and lead evidence-based assessments with system owners.
- Device governance and enforcement (35%): Lead a device compliance enforcement program, expand Intune capabilities, and connect device posture to access decisions through Zscaler and ICAM.
- Zscaler DLP (20%): Partner with the Data Pillar Security Lead on endpoint, email, web and GenAI DLP during the move off a legacy tool.
- Compliance and delivery (15%): Map controls to NIST 800-53 and DHS 4300A, support ATO work, and brief government leaders.
What You'll Need:
- Bachelor's degree in a related field (or 4 more years of experience in its place)
- 10+ years in IT or cybersecurity, including 5+ in endpoint or device security
- Hands-on MDM experience (Intune preferred) and experience with Zscaler (ZIA/ZPA/ZCC) or a similar SSE platform
- Working knowledge of identity and access concepts (Entra ID, conditional access, SAML/OIDC)
- Familiarity with federal frameworks (ZTMM, NIST 800-207/800-53, RMF/ATO)
- Strong writing skills and comfort briefing senior government leaders
- U.S. citizenship and the ability to obtain DHS Public Trust
Set Yourself Apart:- Enterprise DLP design and tuning, especially Zscaler
- DHS, USCIS or CISA experience
- MD-102, SC-300, SC-200, Zscaler, CISSP or CCSP certifications
- Experience integrating Intune and Zscaler with EDR and identity tools
- Active Secret or higher clearance, or a current DHS background investigation.
Salary: $150,000-$190,000
The salary range listed reflects our standard market pay structure. Final compensation will be determined based on multiple factors, including, but not limited to, the candidate's unique qualifications, skills required for the position, professional experience, education, and business needs, at the time of hire.
