Senior Systems Engineer – Endpoint Security

CACI•Fort Meade, MD

5d•Onsite

About The Position

CACI is seeking a Senior Systems Engineer that will serve as a principal technical leader and subject matter expert for the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program. Working within a highly classified, multi-domain environment, you will shape the strategic architecture, integration, deployment, and optimization of world‑class endpoint security platforms including Microsoft Defender for Endpoint (MDE) and Trellix HX. This is a chance to directly strengthen national security by engineering resilient endpoint defense capabilities that provide full enterprise visibility, rapid threat containment, and robust configuration management.

Requirements

20+ years of experience as a Systems Engineer on programs of similar scope, type, and complexity.
Proven experience planning and leading Systems Engineering efforts.
Bachelor’s degree in Systems Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or a related field from an accredited institution. Five (5) additional years of Systems Engineering experience may be substituted for a bachelor’s degree.
Microsoft Defender for Endpoint Expertise: Hands‑on engineering experience with MDE architecture, deployment via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
Trellix HX Expertise: Proven ability to engineer, deploy, and manage Trellix HX controllers and agents within air‑gapped or highly restricted networks, including creating OpenIOC and YARA rules.
Operating System & Forensic Knowledge: Deep understanding of Windows, Linux, and macOS internals, including file systems, registries, and process execution behavior.
Professional Certifications: Compliance with DoD 8570/8140 IAM Level II or III baseline requirements.

Nice To Haves

Vendor Certifications: Microsoft Security Operations Analyst (SC‑200), Azure Security Engineer (AZ‑500), and/or Trellix engineering certifications.
Methodologies & Tools: Experience with Model‑Based Systems Engineering (MBSE), Cameo, and Atlassian suite tools such as Jira and Confluence.
Technical Frameworks: Familiarity with NSA Technical Manual standards (e.g., NSA DS‑89) and defense‑in‑depth engineering principles.
Core Competencies: Demonstrated collaboration skills, transparency in managing high‑consequence systems, and a passion for developing and mentoring technical talent.

Responsibilities

Lead the full lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on‑premises, cloud, and virtual desktop infrastructures (VDI).
Develop advanced system engineering documentation, deployment strategies, and implementation plans.
Optimize agent configurations, exclusion policies, and system performance to ensure mission success and minimize friction across high‑demand environments.
Monitor and maintain enterprise endpoint health at scale.
Work directly with threat hunters and intelligence analysts to convert actionable intelligence into custom technical indicators of compromise (IOCs) using KQL and YARA.
Serve as a primary technical advisor to Government stakeholders regarding system risks, design decisions, and engineering recommendations.
Provide advanced forensic and technical support to the SOC during high‑priority incidents.
Mentor junior and mid‑level engineers, fostering growth, collaboration, and technical excellence.