Endpoint Engineer

TIAG; Chevy Chase (MD); Remote; USD 110,000 - 160,000; Full time

Job summary

TIAG is seeking an Endpoint Engineer to support a major cybersecurity modernization for USU. The role can be primarily remote with periodic on-site support at Bethesda, MD. A Secret clearance is required to start, with Citizenship or naturalization mandatory.

Responsibilities include auditing GPOs, deploying CBCM, addressing CAA and posture issues, applying DoD security standards, and drafting SOPs for government IT teams. The position emphasizes training and transition planning.

Qualifications

• Bachelor's degree in Computer Hardware Engineering, Computer Science, Information Systems, or equivalent experience.
• 5+ years of experience in enterprise endpoint management, hardware deployment, and OS policy administration within DoD or federal agencies.
• Hands-on experience with Windows GPOs, Chrome OS/CBCM, MDM solutions, and multi-OS enterprise client hardware.

Responsibilities

• Audit desktop/laptop GPOs, hardware endpoints, and local configurations across Bethesda HQ, NCR sites, and San Antonio.
• Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.
• Resolve endpoint Context-Aware Access (CAA) access issues and device posture evaluation errors.
• Ensure daily hardware updates, endpoint setups, and device configurations follow FAR 39, Section 508, NIST 800-207, and DoD ZTRA.
• Regularly scan hardware endpoints to identify security weaknesses, apply patches, and implement DoD STIGs.
• Author SOPs for enterprise hardware/endpoint management and assist in training government IT personnel.
• Create a Transition Roadmap to move devices from As-Is to To-Be.
• Lead hands-on training sessions and prepare materials for government IT/Security Operations teams.

Skills

Windows GPOs

Chrome OS/CBCM

MDM solutions

Multi-OS enterprise hardware

Education

Bachelor's degree in Computer Hardware Engineering, Computer Science, Information Systems, or equivalent experience

Job description

TIAG is now hiring an Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU). This role has the ability to be primarily remote, and support may be needed periodically at our customer location in Bethesda, MD. This position requires a Secret level clearance to be processed in order to begin work, so US or Naturalized Citizenship is a requirement.Key Responsibilities:Audit existing desktop/laptop GPOs, hardware endpoints, and local client configurations across HQ (Bethesda, MD), NCR sites, and San Antonio, TX.Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.Resolve endpoint-level Context-Aware Access (CAA) access issues and device posture evaluation errors.Make sure all daily hardware updates, endpoint setups, and device configurations strictly follow required federal accessibility and security rules, including FAR Part 39, Section 508, NIST 800-207 guidelines, and the Department of Defense Zero Trust Reference Architecture (DoD ZTRA).Regularly scan hardware endpoints to identify security weaknesses, actively apply software patches, and implement DoD STIGs to harden devices, ensuring all systems remain secure, compliant, and fully operational.Author Standard Operating Procedures (SOPs) for enterprise hardware/endpoint management and assist in training government IT personnel.Help create a step-by-step project plan (Transition Roadmap) that estimates the time and resources needed to move the agency's devices from their current legacy setup (\"As-Is\") to the newly designed, modernized security framework (\"To-Be\").Lead hands-on training sessions and create easy-to-follow materials for the government's IT and Security Operations teams. The goal is to successfully transfer your technical knowledge so they can manage the systems independently, ensuring that 90% of the participating government staff can pass a final technical evaluation with a score of 80% or better.Required Experience & Education:Bachelor's degree in Computer Hardware Engineering, Computer Science, Information Systems, or equivalent experience.5+ years of experience in enterprise endpoint management, hardware deployment, and operating system policy administration within DoD or federal agencies.Hands-on expertise with Windows GPOs, Chrome OS/CBCM, MDM solutions, and multi-OS enterprise client hardware.Recommended Credentials & Certifications:CompTIA Security+Microsoft Certified: Enterprise Administrator Associate / Modern Desktop AdministratorGoogle Associate Cloud Engineer / Chrome OS SpecialistDoD 8140/8570 IAT Level II certificationTIAG is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a), and 41 CFR 60-741.5(a) and employment decisions shall be based solely on merit and without regard disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. TIAG takes proactive steps to employ and advance in employment qualified individuals without regard to disability or protected veteran status. The parties also agree that, as applicable, they will abide by the requirements and may be subject and required to take action pursuant to the following laws and accompanying regulations:The Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended (and its implementing regulations at 41 C.F.R. 60-300);Section 503 of the Rehabilitation Act of 1973, as amended (and its implementing regulations at 41 C.F.R 60-741); andExecutive Order 13496 (and its implementing regulations at 29 C.F.R. part 471, Appendix A to Subpart A).