Endpoint Engineer

TIAG; Bethesda (MD); Remote; USD 80,000 - 100,000; Full time

Job summary

TIAG is hiring an Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU) in Bethesda, MD. The role offers mostly remote work with periodic on-site support and requires a Secret clearance to begin.

Key duties include auditing endpoints, deploying CBCM policies, enforcing DoD security standards, and creating SOPs for enterprise hardware management. US citizenship or naturalization is a requirement.

Qualifications

• Secret level clearance required.
• Citizenship in the US or naturalization is required to obtain access.
• Familiarity with federal security standards and DoD security controls is expected.

Responsibilities

• Audit existing desktop/laptop GPOs, hardware endpoints, and local client configurations across HQ (Bethesda, MD), NCR sites, and San Antonio, TX.
• Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.
• Resolve endpoint-level Context-Aware Access (CAA) access issues and device posture evaluation errors.
• Make sure all daily hardware updates, endpoint setups, and device configurations strictly follow required federal accessibility and security rules, including FAR Part 39, Section 508, NIST 800-207 guidelines, and the Department of Defense Zero Trust Reference Architecture (DoD ZTRA).
• Regularly scan hardware endpoints to identify security weaknesses, actively apply software patches, and implement DoD STIGs to harden devices, ensuring all systems remain secure, compliant, and fully operational.
• Author Standard Operating Procedures (SOPs) for enterprise hardware/endpoint management and assist in training government IT personnel.
• Help create a step-by-step project plan (Transition Roadmap) that estimates the time and resources needed to move the agency's devices from their current legacy setup ("As-Is") to the newly designed, modernized security framework ("To-Be").

Skills

Endpoint engineering

Job description

Job Details: Job Location: USU IM IT - Bethesda, MD, Position Type: Full Time, Salary Range: $80000.00 - $100000.00Salary/year, Travel Percentage: None, TIAG is now hiring an Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU). This role has the ability to be primarily remote, and support may be needed periodically at our customer location in Bethesda, MD. This position requires a Secret level clearance to be processed in order to begin work, so US or Naturalized Citizenship is a requirement.

Key Responsibilities:

• Audit existing desktop/laptop GPOs, hardware endpoints, and local client configurations across HQ (Bethesda, MD), NCR sites, and San Antonio, TX.
• Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.
• Resolve endpoint-level Context-Aware Access (CAA) access issues and device posture evaluation errors.
• Make sure all daily hardware updates, endpoint setups, and device configurations strictly follow required federal accessibility and security rules, including FAR Part 39, Section 508, NIST 800-207 guidelines, and the Department of Defense Zero Trust Reference Architecture (DoD ZTRA).
• Regularly scan hardware endpoints to identify security weaknesses, actively apply software patches, and implement DoD STIGs to harden devices, ensuring all systems remain secure, compliant, and fully operational.
• Author Standard Operating Procedures (SOPs) for enterprise hardware/endpoint management and assist in training government IT personnel.
• Help create a step-by-step project plan (Transition Roadmap) that estimates the time and resources needed to move the agency's devices from their current legacy setup (\"As-Is\") to the newly designed, modernized security framework (\"To-Be\