Endpoint Security Engineer: Defender Migration & DoD Compliance

Vista Global Solutions, LLC

Bethesda, Northern (MD, KY)

Hybrid

USD 120,000 - 160,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Paid holidays

PTO

Insurance: medical/dental/vision

401(k) with match

Tuition reimbursement

Job summary

Vista Global Solutions, LLC seeks a Journeyman Endpoint Engineer to lead the enterprise migration to Microsoft Defender for Endpoint across 3,000+ endpoints on Windows, macOS and Linux. You will onboard devices, migrate security agents from Trellix, configure BitLocker/FileVault, and ensure DISA STIG and DoD requirements are met while minimizing user disruption.

The role emphasizes hands-on deployment, automation, and cross-team coordination with cybersecurity, infrastructure, and service desk

Qualifications

3–5 years of endpoint administration or related enterprise engineering.
Active DoD Secret clearance.
DoD IAT Level II certification.
Experience with enterprise endpoint-management and software deployment.
Experience with Windows endpoint configuration and administration.
Experience deploying and troubleshooting endpoint-security agents.
Knowledge of Defender for Endpoint or other EDR tech.
Familiarity with endpoint encryption (BitLocker/FileVault).

Responsibilities

Deploy Defender for Endpoint across Windows, macOS, Linux using automated deployment.
Develop and maintain deployment packages, scripts, policies, configurations.
Monitor enrollment, agent health, connectivity, and remediation of onboarding issues.
Remove legacy Trellix agents and decommission Trellix/ePO environment.
Configure and validate BitLocker/FileVault and escrow recovery keys.
Troubleshoot deployment issues, agent conflicts, and connectivity problems.
Support macOS security extensions and Linux Defender deployment via scripting.
Maintain DISA STIG and DoD cybersecurity compliance across endpoints.
Test configurations and support phased deployment (pilot to production).
Track onboarding progress and provide status updates for the master schedule.
Develop SOPs, deployment procedures, guides, and playbooks.
Coordinate with cybersecurity, infrastructure, service desk, and engineering teams.