Endpoint Security Administration - Senior/SME

Summary

Seeking a highly experienced Endpoint Security Administrator – Senior/SME to join our Cyber Security Services team at Ft. Lee, VA. This role is critical in ensuring the security, compliance, and effectiveness of endpoint defense capabilities across the DeCA enterprise. The ideal candidate is a subject matter expert in endpoint security with deep technical expertise, exceptional communication skills, and a proactive approach to collaboration and incident response.Key Responsibilities: Ensure personnel and practices comply with DoD 8140, Cyber Workforce Qualification Matrix, and associated training repositoriesConfigure, deploy, and maintain Endpoint Security (ENS) components and associated policy managementOn-Access/On-Demand ScansFirewall and Web Control OptionsManage Data Loss Prevention (DLP) and Application Whitelisting:Develop and maintain DLP rules and policiesEstablish enterprise baselines for application whitelisting (Windows and *NIX)Utilize tools and standards including pxGrid, APIs, SAML, Okta, ODBCMaintain, monitor, and enforce compliance with all endpoint products:TASKORDs and CTO implementationBuild strong stakeholder relationships across business units within DeCACollaborate on endpoint settings, troubleshooting, and policy coordination across areas of responsibilityParticipate in Incident Response as needed and resolve endpoint-related tickets within established SLAsMaintain and document endpoint posture and system configurationManage and validate:Rogue System Detection across enterprise subnetsEndpoint Management Agent settings and updatesC2C and Quarantine policies to isolate and remediate non-compliant devicesAnalyze syslog and packet data, perform subnetting, and integrate systems across Microsoft and Linux platformsGenerate and coordinate reports (CMRS, Device/System Tags, ad hoc, compliance tracking)Preferred Skills & Tools: McAfee/Trellix ePO, ENS, DLP, Rogue System DetectionIntermediate-level systems administration for Microsoft and LinuxFamiliarity with DoD and Agency cybersecurity directives and change control processesAbility to coordinate with 3rd-party providers and internal technical teamsRequirements Active DoD Secret Clearance (Required)Must be qualified under the DoD 8140 Cyber Workforce Qualification Program with the following:IT 521 – Endpoint Security AdministratorCyber 212 – Cybersecurity Service Provider (Infrastructure Support)7+ years of professional IT experience, including at least 3+ years specializing in endpoint cybersecurityDemonstrated experience with Trellix ePolicy Orchestrator (ePO), both on-premises and cloud-basedStrong grasp of cybersecurity frameworks (NIST 800-53, RMF) and DoD compliance (STIGs, TASKORDs, CTOs)Endpoint Security Solutions (ESS) Administrator 202 certificate - RequiredHBSS Advanced 301 & 501 Highly recommended.#J-18808-Ljbffr

Job Description

Seeking a highly experienced Endpoint Security Administrator – Senior/SME to join our Cyber Security Services team at Ft. Lee, VA. This role is critical in ensuring the security, compliance, and effectiveness of endpoint defense capabilities across the DeCA enterprise. The ideal candidate is a subject matter expert in endpoint security with deep technical expertise, exceptional communication skills, and a proactive approach to collaboration and incident response.Key Responsibilities: Ensure personnel and practices comply with DoD 8140, Cyber Workforce Qualification Matrix, and associated training repositoriesConfigure, deploy, and maintain Endpoint Security (ENS) components and associated policy managementOn-Access/On-Demand ScansFirewall and Web Control OptionsManage Data Loss Prevention (DLP) and Application Whitelisting:Develop and maintain DLP rules and policiesEstablish enterprise baselines for application whitelisting (Windows and *NIX)Utilize tools and standards including pxGrid, APIs, SAML, Okta, ODBCMaintain, monitor, and enforce compliance with all endpoint products:TASKORDs and CTO implementationBuild strong stakeholder relationships across business units within DeCACollaborate on endpoint settings, troubleshooting, and policy coordination across areas of responsibilityParticipate in Incident Response as needed and resolve endpoint-related tickets within established SLAsMaintain and document endpoint posture and system configurationManage and validate:Rogue System Detection across enterprise subnetsEndpoint Management Agent settings and updatesC2C and Quarantine policies to isolate and remediate non-compliant devicesAnalyze syslog and packet data, perform subnetting, and integrate systems across Microsoft and Linux platformsGenerate and coordinate reports (CMRS, Device/System Tags, ad hoc, compliance tracking)Preferred Skills & Tools: McAfee/Trellix ePO, ENS, DLP, Rogue System DetectionIntermediate-level systems administration for Microsoft and LinuxFamiliarity with DoD and Agency cybersecurity directives and change control processesAbility to coordinate with 3rd-party providers and internal technical teamsRequirements Active DoD Secret Clearance (Required)Must be qualified under the DoD 8140 Cyber Workforce Qualification Program with the following:IT 521 – Endpoint Security AdministratorCyber 212 – Cybersecurity Service Provider (Infrastructure Support)7+ years of professional IT experience, including at least 3+ years specializing in endpoint cybersecurityDemonstrated experience with Trellix ePolicy Orchestrator (ePO), both on-premises and cloud-basedStrong grasp of cybersecurity frameworks (NIST 800-53, RMF) and DoD compliance (STIGs, TASKORDs, CTOs)Endpoint Security Solutions (ESS) Administrator 202 certificate - RequiredHBSS Advanced 301 & 501 Highly recommended.#J-18808-Ljbffr