Endpoint Security as a Service (ESS) Engineer

Leidos•Washington, DC

22h

About The Position

Leidos is seeking a skilled and driven Endpoint Security as a Service (ESS) Engineer and Systems Administrator to join our team at the Washington Navy Yard — where innovation meets mission. What You’ll Do As an ESS Engineer and Systems Administrator, you won’t just maintain systems — you’ll elevate them. You’ll be part of a collaborative team that installs, configures, and fine-tunes advanced security solutions to ensure critical network infrastructure runs at peak performance. You’ll also evaluate emerging technologies and shape the future of endpoint protection across a highly sensitive environment. You will ensure that our systems comply with the latest security patches and configurations. Come break things (in a good way). Then build them smarter. We're the tech company everyone calls when things get weird. We don’t wear capes (they’re a safety hazard), but we do solve high-stakes problems with code, caffeine, and a healthy disregard for “how it’s always been done.”

Requirements

Active Top Secret clearance (SCI eligible).
8+ years of IT experience, including 2+ years focused on ESS (or equivalent experience in lieu of degree).
DOD 8570 IAT Level II certification or higher.
Expertise in Windows Server 2016+ and endpoint platforms such as Trellix Agent, ENS FW, PA, DLP, RSD, and ePO.
Strong analytical skills with a knack for troubleshooting under pressure.

Nice To Haves

TS/SCI clearance and DOD 8570 IAT Level III certification.
Hands-on experience with RedHat Enterprise Linux, VMware, Microsoft Hypervisor, or RedHat VM Manager.
Familiarity with SADR environments and maintaining ePO servers.
Completion of Basic and Advanced ESS DISA training.

Responsibilities

Overseeing the full lifecycle of the ESS and its agents — install, manage, maintain, and optimize.
Creating and deploying custom ESS signatures and policies.
Proactively monitoring ESS for intrusions, failures, and performance anomalies.
Ensuring reliable and secure endpoint operations across all clients and servers.
Troubleshooting ESS deployments and policy rollouts across local and remote systems.
Conducting threat analysis and crafting custom security rules tailored to advanced exploits and vulnerabilities.
Providing in-depth reporting on system health, event trends, and module performance.
Supporting major updates and compliance efforts, including STIG-mandated Trellix upgrades.
Helping design and evaluate network components and develop cutting-edge technical solutions.