Endpoint Security Architect

Shield Consulting Solutions, Inc.; Maryland; On-site; USD 240,000 - 250,000; Full time

Benefits offered by this job

25 days PTO

11 paid holidays

Employer-paid healthcare for employees

8% 401(k) employer match – immediate v

Job summary

Shield Consulting Solutions, Inc. seeks a principal systems engineer to lead endpoint security architecture within a national security program.

The role focuses on deploying Microsoft Defender for Endpoint (MDE) and Trellix HX across hybrid environments, ensuring end-to-end integration and robust threat containment. The successful candidate will collaborate with threat analysts, translate intelligence into IOCs using KQL and YARA, and mentor junior engineers while advising government

Qualifications

• 20 years of experience as a system engineer.
• Bachelor’s degree in a technical discipline; 5 additional years may substitute for a degree.

Responsibilities

• Lead lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments (on-premises, cloud, VDI).
• Author complex system engineering and implementation plans; tune configurations and monitor endpoint health at scale.
• Collaborate with threat hunting and intelligence analysts to translate threat intel into custom IOCs using KQL and YARA.
• Act as primary technical advisor to Government stakeholders and mentor junior engineers within the program.

Skills

MDE architecture

Trellix HX engineering

Windows/Linux/macOS internals

DoD IAM 8570/8140 Level II/III

Education

Bachelor’s degree in a technical discipline

5+ years experience substituting for degree

Tools

MECM/SCCM or Intune

KQL for hunting

YARA rules

OpenIOC

Job description

• Active TS/SCI w/Polygraph REQUIRED** Please do not apply if you do not currently possess this level of clearance.

Telework: None

Basic Requirements

• 20 years’ experience as a system engineer
• Bachelor’s degree in a technical discipline
• 5 additional years of experience as a system engineer may be substituted for a degree

Job Description

Serves as a principal technical leader and subject matter expert within the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program.

Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX.

This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission‑critical assets to defend national security infrastructure against sophisticated cyber threats.

Essential Duties And Responsibilities

• Responsible for leading the lifecycle engineering and scale‑out architecture of MDE and Trellix HX across hybrid environments, including on‑premises, cloud, and virtual desktop infrastructures (VDI).
• This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction, and monitoring overall endpoint health at scale.
• Collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules.
• Act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high‑priority incidents, and actively mentor junior and mid‑level engineering personnel within the program.

Required Experience

• Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air‑gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: In‑depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
• Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.

Desired Experience

• Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC‑200), Azure Security Engineer Associate (AZ‑500), or Trellix Certified Engineering credentials.
• Methodologies & Toolsets: Experience with Model‑Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
• Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS‑89) and defense‑in‑depth engineering principles.
• Core Competencies: Strong record of team collaboration, exceptional transparency in managing high‑consequence infrastructure, and an aptitude for developing technical leadership pipelines.

Salary: $240,000 - $250,000 annually

Excellent benefits package including 25 days PTO, 11 paid holidays, 100% employer‑paid healthcare for employees and dependents – available day 1, 8% 401(k) employer match – immediate vesting.

Disclaimer: The salary range provided is an estimate based on current market conditions and may be adjusted based on factors such as experience, skills, and qualifications. The final salary offer will be determined after a thorough review of the candidate's background and alignment with the role. Please note that this range is subject to change and should be considered as a guideline rather than a definitive figure.

Shield Consulting Solutions is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.

This is a full‑time position.