Endpoint Engineer: Defender Rollout & Encryption Specialist

Paycom; Bethesda, Northern (MD, KY); Hybrid; USD 70,000 - 85,000; Full time

Job summary

Paycom in Bethesda, MD is hiring a Junior Endpoint Engineer to support a cybersecurity modernization effort. You will assist senior engineers in migrating endpoints to Microsoft Defender for Endpoint and manage deployment waves in a hybrid onsite role.

The position requires a DoD Secret clearance, 1–3 years of IT/endpoint experience, and familiarity with MECM/SCCM, BitLocker, and FileVault. Candidates should have MD-102/SC-900 or equivalent certifications.

Qualifications

• Active DoD Secret clearance required.
• 1–3 years in IT support, systems administration, or endpoint management.
• Familiarity with MECM/SCCM deployment tools.
• Experience across Windows, macOS, and Linux administration.
• Knowledge of BitLocker and FileVault encryption.
• Certifications: IAM level, MD-102/SC-900, A+/Network+ or OS certs.

Responsibilities

• Assist in rolling out the MDE agent across Windows, macOS, Linux via MECM/SCCM and scripts.
• Monitor Defender portal during deployment waves for telemetry and success.
• Uninstall legacy Trellix agents after MDE verification.
• Support transition of disk encryption to BitLocker and FileVault.
• Escrow recovery keys in Entra ID and verify access protection.
• Contribute to STIG compliance reviews at agent level.
• Document blockers or conflicts for escalation by senior staff.

Skills

Active DoD Secret clearance

1–3 years IT/endpoint experience

Windows/macOS/Linux administration

BitLocker & FileVault knowledge

Documentation & compliance

Education

DoD 8570 IAM Level I or IAT II certification

MD-102 or SC-900 Microsoft certifications

CompTIA A+/Network+ or OS-specific certs

Tools

MECM/SCCM

Microsoft Defender for Endpoint (MDE)

Entra ID

Job description

Paycom in Bethesda, MD is hiring a Junior Endpoint Engineer to support a cybersecurity modernization effort. You will assist senior engineers in migrating endpoints to Microsoft Defender for Endpoint and manage deployment waves in a hybrid onsite role.

The position requires a DoD Secret clearance, 1–3 years of IT/endpoint experience, and familiarity with MECM/SCCM, BitLocker, and FileVault. Candidates should have MD-102/SC-900 or equivalent certifications.