Senior IT Systems & Security Engineer (CedD226)

Role overview Join a commercial cyber operations team as a senior technical implementation engineer who leads hands-on deployment work across diverse customer environments. This role partners with Compliance Leads on NIST SP 800-171 readiness by designing, implementing, and validating the underlying systems that satisfy those controls.

Responsibilities - Assess unfamiliar customer environments and lead technical implementation plans alongside the Compliance Lead. - Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid setups. - Design, migrate, and operate endpoint-management programs across multiple MDM and UEM platforms, with deep work in Jamf and Microsoft Intune. - Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. - Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access. - Validate completed work and produce configuration records, diagrams, evidence, and runbooks while mentoring other engineers and turning repeatable tasks into standards, scripts, and automation.

Requirements - Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments. - Strong hands-on experience with both Microsoft and Google stacks, including Microsoft 365, Entra ID, Active Directory, and Google Workspace. - Broad MDM/UEM experience across multiple platforms, with strong practical use of Jamf and Microsoft Intune. - Experience managing Windows, macOS, iOS, and Android devices plus networking, firewalls, VPNs, identity, logging, endpoint protection, vulnerability management, patching, and backup systems. - Ability to lead customer implementations, make independent technical decisions, and explain them clearly. - US citizenship with eligibility for CUI access; ability to work effectively in a remote, asynchronous environment.

Nice to have - GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android Enterprise, Microsoft Defender, or Microsoft Purview experience. - Defense contractor or government background with NIST SP 800-171, NIST SP 800-53, or CMMC 2.0 familiarity. - PowerShell, shell scripting, infrastructure as code, security monitoring, or workflow-automation skills. - Relevant Microsoft, Google, Apple, cloud, networking, or security certifications.

Benefits and work setup - Remote within the United States with 10-25% travel. - Compensation range of $148,750 to $201,250 USD based on experience and national benchmarks.