24 zero trust engineer jobs at 12 companies in Colorado

2mo
Save
Mark Applied
Hide
Senior Staff Security Engineer - Network Security
Denver or San Francisco or New York City or San Jose
$210k-$270k/yr HybridFull Time
Gusto
Gusto: Cloud-based payroll and HR software for small businesses.
10+ YOE10+ years in security engineering; Cloudflare WAF/DDoS/Zero Trust; Terraform/Crossplane; AWS networking; incident response; AI-native workflows; security certifications.
Cloudflare, Terraform, Crossplane, AWS, CloudFront, WAF, DDoS, Zero Trust, Panther, Wiz, CrowdStrike, Claude Code, MCP-driven tooling, LLM automations
2w
Save
Mark Applied
Hide
Principal Cloud Network Engineer
Goleta or Arizona or California or Colorado or Indiana or Massachusetts or Minnesota or New York or Oregon or Pennsylvania or Texas or Utah or Washington
$155k-$209k/yr HybridFull Time
Deckers Brands
Deckers BrandsNYSE: DECK: Designs and markets global footwear and lifestyle performance brands.
12+ YOE12+ years enterprise and cloud networking experience, expertise in cloud/hybrid network architecture, IPAM, Zero Trust, automation with Terraform and CI/CD, strong communication and leadership; bachelor’s degree required.
AWS, OCI, Azure, Terraform, GitLab CI/CD, APIs
1w
Save
Mark Applied
Hide
Cloud Network Architect/Engineer - Senior
Colorado Springs, Colorado, United States
$165k-$200k/yr OnsiteFull Time
Modern Technology Solutions
Modern Technology Solutions: A technology and engineering firm providing cloud and cyber capabilities to government and defense customers.
10+ YOE10+ years designing secure cloud and enterprise network architectures for DoD environments; experience with AWS cloud networking, multi-classification domains, Zero Trust, RMF and DISA STIGs.
AWS Transit Gateway, Virtual Private Cloud (VPC), Direct Connect, VPN, software-defined networking (SDN), SIEM, Platform One, Space CAMP, DevSecOps, Infrastructure as Code (IaC)
1w
Save
Mark Applied
Hide
Cloud Network Architect/Engineer - Senior
Colorado Springs, Colorado, United States
$165k-$200k/yr OnsiteFull Time
Modern Technology Solutions, Inc.
Modern Technology Solutions, Inc.: Provides engineering, technology, and cybersecurity services for national security.
10+ YOE10+ years designing enterprise cloud network architectures for DoD environments; experience with AWS, Zero Trust, Cross Domain Solutions, RMF/NIST/STIGs; Top Secret/SCI required.
AWS, AWS Transit Gateway, Virtual Private Cloud (VPC), Direct Connect, VPN, software-defined networking (SDN), SIEM, Platform One, Space CAMP, Platform-as-a-Service (PaaS), Infrastructure as Code (IaC)
1mo
Save
Mark Applied
Hide
Presales Systems Engineer - SASE
Durham or Denver or Fort Collins
$121k-$284k/yr RemoteFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Provides edge-to-cloud IT infrastructure and platform services.
4+ YOE4+ years in presales, sales engineering, or solution architecture; hands-on SASE/SSE/Zero Trust experience; strong networking and security technology knowledge; excellent communication and demo skills.
HPE Aruba Networking SASE, EdgeConnect, SD-WAN, Aruba Networking SSE, Aruba Central, ClearPass, SRX, ZTNA, SWG, CASB, DEM, AWS, Azure, Google Cloud
2mo
Save
Mark Applied
Hide
Lead Security Engineer, Enterprise Security
Denver or Boston
$175k-$263k/yr HybridFull Time
Klaviyo
KlaviyoNYSE: KVYO: Software platform for automated e-commerce marketing and customer data.
7+ YOE7+ years in security or infrastructure engineering; expertise in IAM, Zero Trust, endpoint security, and cloud security; Terraform; AWS; enterprise IdP (Okta); Cloudflare; CNAPP tools; SAML/SCIM/OIDC.
Terraform, AWS, Okta, Cloudflare, Wiz, CrowdStrike, SAML, SCIM, OIDC, OAuth, CNAPP, IAM
1mo
Save
Mark Applied
Hide
Pre-Sales Engineer, Cybersecurity
Virginia or Pennsylvania or Colorado or North Carolina or Washington or Maryland or Connecticut
$175k-$412k/yr RemoteFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Provides global edge-to-cloud technology solutions and IT infrastructure services.
8+ YOE8+ years systems engineering or technical leadership in cybersecurity/network security; deep SASE, SSE, Zero Trust, RMF/FedRAMP/STIG knowledge; bachelor’s degree or equivalent; DoD 8140/8570 and advanced certs preferred.
SASE, SSE, Zero Trust Architecture (ZTA), NIST SP 800-207, Risk Management Framework (RMF), STIG, FedRAMP, DoD IL5, DoD IL6, TCP/IP, BGP, OSPF, Firewalls, IPS/IDS, IPsec, SSL/TLS, SSO, SAML, OAuth, AWS, Azure, GCP, SIEM, SOAR, XDR
1w
Save
Mark Applied
Hide
Sales Engineer
Washington or Tampa or San Antonio or Colorado Springs or Norfolk
HybridFull Time
Lastwall
Lastwall: Provides identity-centric cybersecurity solutions for defense and government organizations.
7+ YOEActive TS/SCI clearance,7+ years defense/federal or cybersecurity sales/technical experience,prior U.S. military or DoW experience,ICAM/Zero Trust knowledge,ability to run demos,deployments,and translate field feedback.
FedRAMP, CMMC, IDCommand, PKI, CAC
1mo
Save
Mark Applied
Hide
Presales Systems Engineer - SASE
Durham or Denver or Fort Collins
$121k-$284k/yr RemoteFull Time
Hewlett Packard Enterprise
Hewlett Packard EnterpriseNYSE: HPE: Providing global edge-to-cloud infrastructure and IT solutions for businesses.
4+ YOE4+ years in technical presales/sales engineering or solution architecture; hands-on SASE/SSE/Zero Trust/SD-WAN experience; strong networking and security knowledge; public cloud familiarity; comfortable delivering demos, workshops, and POCs; regional travel required.
HPE Aruba Networking, EdgeConnect, Aruba Central, ClearPass, SRX, AWS, Azure, Google Cloud
2mo
Save
Mark Applied
Hide
IT Support Engineer
Lakewood, Colorado, United States
$30-$34/hr OnsiteFull Time
Horizon Ag Products
Horizon Ag Products: Manufacturer of humic-based biostimulants and soil health products.
2+ YOEAssociate degree in Computer Science or Information Systems or 2 years of equivalent work experience; strong Windows/Microsoft 365 knowledge; basic networking; security mindset; good communication; cloud concepts; bonus SharePoint, Zero Trust, Intune familiarity.
Windows, Microsoft 365, SharePoint, Intune, zero trust, Cloud services (SaaS IaaS PaaS)
2mo
Save
Mark Applied
Hide
Identity Provider Engineer
Riverdale or Alexandria or Charlottesville or Colorado Springs or Norfolk or Reston or Tampa
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
Experience with Ping Federate/Okta/Entra ID; SAML 2.0/OAuth 2.0/OIDC; custom integrations; Java/JavaScript/Python/PowerShell/Groovy; REST APIs; AD/LDAP; Zero Trust and MFA; TS/SCI clearance; HS diploma.
Ping Federate, Okta, Entra ID, SAML, OAuth, OIDC, Java, JavaScript, Python, PowerShell, Groovy, REST APIs, Active Directory, LDAP
2mo
Save
Mark Applied
Hide
Systems Infrastructure & Network Security Operations Engineer
Spring or Fort Collins
$93k-$144k/yr OnsiteFull Time
HP
HPNYSE: HPQ: Manufacturer of personal computers, printers, and imaging devices.
6+ YOE6+ years networking and systems experience with zero-trust design, IaC and automation (Ansible, Terraform, Python), CI/CD for network assets, vulnerability management, cloud networking, and architecture governance; technical degree or equivalent experience.
Ansible, Python, Terraform, Git, Jenkins, GitLab CI, Nessus, Qualys, VMware vSphere, Proxmox, Linux, Windows, F5, InfoBlox, AWS VPC, Azure VNets, TOGAF, ArchiMate, OSPF, BGP, MPLS, VXLAN
1mo
Save
Mark Applied
Hide
Systems Architect
Aurora, Colorado, United States
$87k-$198k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
10+ YOE10+ years designing system architectures for on‑prem and cloud environments, DevSecOps and container orchestration (Kubernetes/OpenShift), zero‑trust and cybersecurity frameworks, Secret clearance, and a Bachelor's degree.
Kubernetes, OpenShift, SDLC, DevSecOps, AWS
1w
Save
Mark Applied
Hide
System Architect
Colorado Springs or Washington D.C. or Tampa or Fort Meade or Arlington
$120k-$150k/yr OnsiteFull Time
World Wide Technology
World Wide Technology: Global technology solutions provider and systems integrator.
8+ YOEDesign and deliver secure, scalable enterprise architectures for high-security environments; 8+ years architecture/engineering experience; Top Secret SCI preferred; proficiency in cloud, automation, and Zero Trust.
OpenShift, Azure Government, AWS GovCloud, Infrastructure as Code (IaC), CI/CD
1mo
Save
Mark Applied
Hide
Senior Agentic Identity Security Manager
Irving or Milwaukee or Columbus or Kirkland or Cincinnati or New York City or Cleveland or Oklahoma City or Austin or Albany or Chicago or St. Petersburg or Hartford or Pittsburgh or St. Louis or Miami or Sacramento or Raleigh or Minneapolis or Mountain View or Scottsdale or San Francisco or Morristown or Denver or Boston or Philadelphia or Des Moines or Overland Park or Los Angeles or Charlotte or Walnut Creek or Carmel or Seattle or Houston or Arlington or Atlanta or Redmond or Bentonville or Beaverton or Nashville or Detroit or San Diego or Dallas
$80k-$294k/yr HybridFull Time
Accenture
AccentureNYSE: ACN: Global provider of management consulting and technology services.
5+ YOE5+ years software engineering with Python, 3+ years OAuth 2.0/OIDC and agent framework experience, cloud/container/IaC/CI/CD expertise, Zero Trust/IGA/secrets management knowledge, MCP server experience, bachelor's degree or equivalent.
Python, OAuth 2.0, OIDC, DCR, PAR, token exchange, Claude Agent SDK, LangGraph, AutoGen, CrewAI, Semantic Kernel, MCP server, CyberArk, HashiCorp, AWS, GCP, Azure, Docker, Kubernetes, Terraform, CI/CD
1mo
Save
Mark Applied
Hide
Technical Engineering Advisor – Cybersecurity
Colorado Springs, Colorado, United States
$125k-$185k/yr OnsiteFull Time
GXM Technologies
GXM Technologies: Delivering rapid software solutions and innovation for defense organizations.
7+ YOEU.S. citizen with active TS/SCI, Bachelor's in a technical field, 7+ years in cybersecurity/RMF/accreditation in defense or mission environments; experience with RMF, cATO, SCIF operations, NIST, DISA STIGs, Zero Trust, and DevSecOps.
RMF, NIST, DISA STIGs, Zero Trust, DevSecOps, Continuous Authorization to Operate (cATO), SCIF