IT Systems & Security Engineer (CedD225)

Role Description:

We are seeking a Technical Implementation Engineer to join Commercial Cyber Operations. This person will perform hands-on systems work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will implement, test, and document the required technical controls with support from a senior engineer.

Responsibilities:

The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise.

• Configure and secure Microsoft 365, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and related business systems.

• Deploy and operate endpoint-management controls across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune.

• Implement identity, multifactor authentication, permissions, endpoint security, logging, vulnerability management, patching, backup, and recovery controls.

• Support Windows, macOS, iOS, Android, networks, firewalls, VPNs, DNS, and secure remote access.

• Troubleshoot technical issues with customer IT teams, service providers, vendors, and Defense Unicorns engineers.

• Test completed changes and produce accurate configuration records, diagrams, evidence, and runbooks.

• Complete assigned implementation work on schedule and raise risks or blockers early.

• Help turn repeatable work into checklists, scripts, and automation.

Minimum Experience and Qualifications:

• Experience administering, securing, and troubleshooting business IT environments.

• Hands-on experience with Microsoft 365, Entra ID, Active Directory, and Google Workspace.

• Mobile device management or unified endpoint management experience across more than one platform, including practical experience with Jamf and Microsoft Intune.

• Experience supporting Windows and macOS endpoints; experience with iOS and Android is strongly preferred.

• Familiarity with networking, firewalls, identity, logging, endpoint protection, vulnerability management, patching, and backups.

• Ability to troubleshoot methodically, document work accurately, and communicate clearly with customers and internal teams.

• Proven ability to deliver results in a remote, asynchronous environment.

• US citizenship with CUI access.

Preferred Experience and Qualifications:

• GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android Enterprise, Microsoft Defender, or Microsoft Purview experience.

• Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls.

• Cybersecurity Maturity Model Certification (CMMC) 2.0 experience.

• PowerShell, shell scripting, security monitoring, or workflow-automation experience.

• Relevant Microsoft, Google, Apple, cloud, networking, or security certifications.

Travel Expectations: 10% - 25%