Endpoint Engineer

TIAG • Bethesda, MD

1d • $80,000 - $100,000 • Remote

About The Position

TIAG is hiring an Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU). The role is primarily remote, with periodic support potentially required at the customer location in Bethesda, Maryland. A Secret clearance must be processed before work begins, and U.S. or naturalized citizenship is required.

The Endpoint Engineer will assess and manage enterprise endpoints across multiple operating systems and locations, support cloud-based endpoint and browser policy deployments, troubleshoot device access and posture issues, and maintain compliance with federal accessibility and security requirements. The position also includes creating endpoint-management procedures, developing a transition roadmap from the current environment to a modernized security framework, and training government IT and Security Operations staff so they can manage the systems independently.

Requirements

• Bachelor's degree in Computer Hardware Engineering, Computer Science, Information Systems, or equivalent experience.
• At least 5 years of experience in enterprise endpoint management, hardware deployment, and operating system policy administration within DoD or federal agencies.
• Hands-on expertise with Windows GPOs, Chrome OS/CBCM, MDM solutions, and multi-OS enterprise client hardware.
• A Secret-level clearance must be processed to begin work.
• U.S. or naturalized citizenship.

Nice To Haves

• CompTIA Security+ certification.
• Microsoft Certified: Enterprise Administrator Associate or Modern Desktop Administrator certification.
• Google Associate Cloud Engineer or Chrome OS Specialist certification.
• DoD 8140/8570 IAT Level II certification.

Responsibilities

• Audit desktop and laptop GPOs, hardware endpoints, and local client configurations across Bethesda headquarters, National Capital Region sites, and San Antonio, Texas.
• Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.
• Resolve endpoint-level Context-Aware Access (CAA) access issues and device posture evaluation errors.
• Ensure hardware updates, endpoint setups, and device configurations comply with federal accessibility and security requirements, including FAR Part 39, Section 508, NIST 800-207, and the DoD Zero Trust Reference Architecture (DoD ZTRA).
• Scan hardware endpoints for security weaknesses, apply software patches, and implement DoD STIGs to harden devices and maintain secure, compliant, operational systems.
• Write Standard Operating Procedures (SOPs) for enterprise hardware and endpoint management and assist with training government IT personnel.
• Help develop a Transition Roadmap estimating the time and resources required to move agency devices from the legacy As-Is environment to the modernized To-Be security framework.
• Lead hands-on training sessions and create training materials for government IT and Security Operations teams.
• Transfer technical knowledge so government staff can manage systems independently, targeting 90% of participating staff passing a final technical evaluation with a score of 80% or better.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level