Senior IT Systems & Security Engineer (CedD226)
Role Description:
We are seeking a Senior Technical Implementation Engineer to join Commercial Cyber Operations. This person will lead hands-on technical work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will design, implement, and validate the systems that support those requirements.
Responsibilities:
The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise.
Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead.
Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments.
Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune.
Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls.
Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access.
Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues.
Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks.
Guide other implementation engineers and turn repeatable work into standards, scripts, and automation.
Minimum Experience and Qualifications:
Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments.
Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace.
Broad mobile device management and unified endpoint management experience across multiple platforms, with strong practical experience using Jamf and Microsoft Intune.
Experience managing Windows, macOS, iOS, and Android devices.
Experience with networking, firewalls, VPNs, identity, logging, endpoint protection, vulnerability management, patching, and backup systems.
Ability to lead customer implementations, make sound technical decisions independently, and explain those decisions in plain English.
Ability to produce accurate technical documentation and work effectively in a remote, asynchronous environment.
US citizenship with CUI access.
Preferred Experience and Qualifications:
GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android
Enterprise, Microsoft Defender, or Microsoft Purview experience.
Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls.
Cybersecurity Maturity Model Certification (CMMC) 2.0 experience.
PowerShell, shell scripting, infrastructure as code, security monitoring, or workflow-automation experience.
Relevant Microsoft, Google, Apple, cloud, networking, or security certifications.
Travel Expectations: 10%-25%
Skills
As published by ashby · 26 questions
Basics
Name, Email, Resume
Short answers (10)
- Phone Number
- Website optional
- LinkedIn Profile optional
- How many ATOs have you completed from start to finish? Please briefly describe their system complexity.
- LinkedIn Profile optional
- GitHub optional
- Website optional
- Did a current Defense Unicorn refer you to this position and, if so, who was it?
- If yes, what event? optional
- What is your desired salary?
Pick from a list (15)
- Do you have experience with the NIST and DoD Impact Level categorization processes?
- Do you have experience with DoD ATO acquisitions and sustainment?
- Do you have prior experience as an ISSE, ISSO, or ISSM within the DoD?
- Do you have experience identifying and utilizing various scan tools. (SAST, DAST, Fuzz, IaC, etc.)?
- Do you have experience working with both CVEs and STIGs?
- Do you have a Security+?
- Do you have a security clearance? If so, which clearance level?
- What is the status of your security clearance?
- Do you have a Common Access Card (CAC)?
- Are you authorized to work lawfully in the United States?
- Will you now, or in the future require Defense Unicorns to sponsor an immigration case in order to employee you?
- What is your US Citizenship status?
- If you do not have a security clearance, are you able to obtain one if necessary?
- Did you meet with or see Defense Unicorns while attending an event or conference (e.g. Kubecon)?
- In this question description we have provided a link to our California Consumer Privacy Act (CCPA) disclosure. Please acknowledge that you have been provided with this disclosure - Link included in question description.
Attachments (1)
- Cover Letter optional