Junior Endpoint Engineer

TIAG is now hiring a Junior Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU). This role reports onsite in a Hybrid capacity at the customer location in Bethesda, MD. This position requires a Secret level clearance to be processed in order to begin work, so US or Naturalized Citizenship is a requierment.

In this role the candidate will assist the Lead Security Architect and senior engineers in migrating approximately 3,000 heterogeneous endpoints (Windows, macOS, and Linux) from a legacy Trellix environment to Microsoft Defender for Endpoint (MDE).

Key Responsibilities

• Assist in executing high-velocity rollouts of the MDE agent to Windows, macOS, and Linux systems using Microsoft Endpoint Configuration Manager (MECM/SCCM) and automated deployment scripts.
• Monitor the Microsoft Defender portal during deployment waves to verify that endpoints are establishing active, error-free telemetry reporting. Track failed deployments and retry statuses.
• Assist in systematically uninstalling legacy Trellix agents across all supported operating systems once MDE telemetry is verified.
• Support the transition of disk encryption management from Trellix to native OS tools, specifically BitLocker for Windows and FileVault for macOS.
• Help verify that all native encryption recovery keys are successfully escrowed and protected within Entra ID to prevent any loss of access.
• Support manual reviews and compliance checks to ensure applied DISA Security Technical Implementation Guides (STIGs) are correctly functioning at the agent level.
• Document device-specific blockers and agent conflicts that require further troubleshooting by senior engineers or Government IT staff.

Required Experience:

• Active DoD Secret clearance.
• 1-3 years of hands-on experience in IT support, systems administration, or endpoint management.
• Familiarity with enterprise deployment tools such as MECM/SCCM.
• Basic administrative knowledge across multiple operating systems, including Windows, macOS, and Linux.
• Understanding of disk encryption tools like BitLocker and FileVault.
• DoD 8570.01-M Information Assurance Management (IAM) Level I or Information Assurance Technical (IAT) Level II certification (e.g., CompTIA Security+ CE).
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) or foundational Microsoft certifications (e.g., SC-900).
• CompTIA A+, Network+, or basic OS-specific certifications (Windows/macOS).

TIAG is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a), and 41 CFR 60-741.5(a) and employment decisions shall be based solely on merit and without regard disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. TIAG takes proactive steps to employ and advance in employment qualified individuals without regard to disability or protected veteran status. The parties also agree that, as applicable, they will abide by the requirements and may be subject and required to take action pursuant to the following laws and accompanying regulations:

The Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended (and its implementing regulations at 41 C.F.R. 60-300);

Section 503 of the Rehabilitation Act of 1973, as amended (and its implementing regulations at 41 C.F.R 60-741); and

Executive Order 13496 (and its implementing regulations at 29 C.F.R. part 471, Appendix A to Subpart A).