Device Pillar Security Lead
Job ID# : 26-1135
Clearance: U.S. citizen; must obtain and keep DHS/USCIS suitability (Public Trust). Active clearance a plus.
Location: Hybrid/ Herndon, VA
Who We Are :
Since our inception back in 2006, Navitas has grown to be an industry leader in the digital transformation space, and we’ve served as trusted advisors supporting our client base within the commercial, federal, and state and local markets.
What We Do :
At our very core, we’re a group of problem solvers providing our award-winning technology solutions to drive digital acceleration for our customers! With proven solutions, award-winning technologies, and a team of expert problem solvers, Navitas has consistently empowered customers to use technology as a competitive advantage and deliver cutting-edge transformative solutions.
What You’ll Do :
Lead the device side of a large federal Zero Trust program at USCIS. As our Device Pillar Security Lead, you'll define what "Advanced" and "Optimal" maturity look like under CISA ZTMM v2.0. You'll then make it real by determining device health from Intune, CrowdStrike and Zscaler to who gets access to what, in real time. You'll work with the Windows, Mac and iOS teams, ICAM (identity and access), the SOC and agency leadership. You'll shape the strategy and also see it enforced.
Responsibilities will include but are not limited to: Device pillar strategy (30%): Own the agency's device maturity baseline, KPIs and roadmap across all 8 functions, and lead evidence-based assessments with system owners.
Device governance and enforcement (35%): Lead a device compliance enforcement program, expand Intune capabilities, and connect device posture to access decisions through Zscaler and ICAM.
Zscaler DLP (20%): Partner with the Data Pillar Security Lead on endpoint, email, web and GenAI DLP during the move off a legacy tool.
Compliance and delivery (15%): Map controls to NIST 800-53 and DHS 4300A, support ATO work, and brief government leaders.
What You’ll Need: Bachelor's degree in a related field (or 4 more years of experience in its place)
10+ years in IT or cybersecurity, including 5+ in endpoint or device security
Hands-on MDM experience (Intune preferred) and experience with Zscaler (ZIA/ZPA/ZCC) or a similar SSE platform
Working knowledge of identity and access concepts (Entra ID, conditional access, SAML/OIDC)
Familiarity with federal frameworks (ZTMM, NIST 800-207/800-53, RMF/ATO)
Strong writing skills and comfort briefing senior government leaders
U.S. citizenship and the ability to obtain DHS Public Trust
Set Yourself Apart: Enterprise DLP design and tuning, especially Zscaler
DHS, USCIS or CISA experience
MD-102, SC-300, SC-200, Zscaler, CISSP or CCSP certifications
Experience integrating Intune and Zscaler with EDR and identity tools
Active Secret or higher clearance, or a current DHS background investigation.
Salary: $150,000-$190,000