Process Re-Engineering SME - Zero Trust - Internship

The Zero Trust Process Re-Engineering SME exists to provide senior-level advisory expertise in assessing, analyzing, and re-engineering the agency's enterprise IT and cybersecurity processes to advance its Zero Trust implementation. This role directly supports TSA's compliance with EO 14028, OMB M-22-09, and related federal mandates by translating policy requirements into actionable process change advisory that spans all five CISA ZTMM v2.0 pillars. The expected outcome is a continuously maturing ZT process posture - with advisory findings, roadmap inputs, and common control catalog contributions that drive measurable ZTMM maturity advancement and defensible IG FISMA compliance performance. This is a senior advisory role, not an execution or documentation support position.

General DutiesProvide senior advisory guidance on the re-engineering of the agency's enterprise IT and cybersecurity processes to align with Zero Trust principles across all five CISA ZTMM v2.0 pillars: Identity, Devices, Networks, Applications & Workloads, and Data.Continuously monitor the federal ZT policy and regulatory landscape, including EOs, OMB memoranda, NIST publications, and DHS/CISA directives, and deliver real-time risk identification and actionable advisory recommendations before compliance deadlines arise.Conduct comprehensive gap analyses of existing agency policy documentation against ZT mandates; develop remediation roadmaps and present recommended courses of action for agency concurrence.Provide advisory support for the development and continuous maturation of the agency's ZT Common Control Catalog (CCC), ensuring recommended approaches align with RMF phases and ZT implementation lifecycle milestones.Develop recommended updates to the ZT Roadmap and Implementation Plan, incorporating process re-engineering findings and stakeholder input for agency review and approval.Apply real-time analysis of process performance data and ZT maturity indicators to proactively surface emerging risk areas and deliver timely recommendations, moving beyond periodic reporting to support continuous risk mitigation.Collaborate with cross-functional stakeholders to validate process outcomes and provide recommended courses of action for continuous improvement.Support all internal and external ZT data calls, requests, audits, and compliance updates; ensure recommended responses are developed and provided for agency review.Develop recommended new and revised cybersecurity policy documents and SOPs; all final documentation is subject to agency review and approval.Provide senior advisory support to ZT leadership on planning, scheduling, solution development, reporting, performance metrics, and program governance.Leverage AI-assisted analysis tools, automation platforms, and prompt engineering techniques to enhance advisory productivity, accelerate gap analysis and documentation tasks, and enable focus on higher-value technical advisory work; apply all AI capabilities in accordance with agency acceptable use policies and Zermount's ethical AI use guidelines.