Endpoint Security Solutions (ESS) Engineer

StratasCorp Technologies; Pensacola (FL); On-site; USD 105,000 - 110,000; Full time

Job summary

StratasCorp Technologies seeks a Senior Endpoint Security Suite (ESS) Administrator to install, configure, and sustain Trellix/McAfee ePolicy Orchestrator (ePO) across complex enterprise environments. The role ensures secure endpoint defenses for DoD mission networks and reports to a daily on-site office in Pensacola.

The candidate will manage ePO architecture, Solidcore, DLP, threat prevention, and policy tuning, while enforcing STIGs and generating real-time compliance dashboards for

Qualifications

• 5+ years of hands-on Trellix/McAfee ePO engineering experience.
• Design, install, and configure ePO application servers, agent handlers, and DB connections.
• Build and sustain ESS infrastructure with policy management and lifecycle upgrades.
• Plan and configure Solidcore in observation and enforcement modes.
• Design and deploy DLP policies, threat prevention, and endpoint security controls.
• Implement STIGs across ePO and managed endpoints; monitor for compliance.

Responsibilities

• Install and configure Trellix/McAfee ePO across enterprise environments.
• Architect ePO infrastructure, repositories, and client deployment tasks.
• Maintain and tune host-based security policies for performance and security.
• Configure Solidcore in both monitoring and enforcement modes.
• Design, deploy, and sustain DLP/Threat Prevention policies and controls.
• Apply DISA STIGs to endpoints and ePO hierarchy; deploy RSD sensors.

Skills

ePO expertise

Policy management

DLP policy design

Threat prevention

SQL querying

Education

High school diploma

Tools

Trellix/McAfee ePO

Solidcore

DLP policies

SQL Server

Job description

Role

Our team supporting the Department of War mission has an immediate need for a Senior Endpoint Security Suite (ESS) Administrator with demonstrated experience in installing, configuring, and sustaining Trellix/McAfee ePolicy Orchestrator (ePO) across complex enterprise environments. Operating in this critical role, you will ensure the operational readiness, security compliance, and robust endpoint defense postures for our global shore enclaves and tactical networks.

On-Site Requirement: This is not a Remote/Hybrid position. Candidates are expected to report to the office daily M-F.

Job Description

• Dedicated ESS/HBSS Expertise: Minimum of 5 years of direct, hands-on engineering experience explicitly focused on Trellix/McAfee ePolicy Orchestrator (ePO) and associated Endpoint Security (ENS) modules, encompassing site system installation, database management, and host-level security policy creation.
• ESS Infrastructure Installation & Architecture: Direct, hands-on responsibility for designing, planning, installing, and configuring Trellix/McAfee ePolicy Orchestrator (ePO) application servers, agent handlers, and database connections. Architect robust repository replication schemes and client deployment tasks designed to handle low-bandwidth, disconnected, or afloat network topologies.
• Sustainment & Policy Management: Build, maintain, and sustain the ESS infrastructure through regular lifecycle upgrades, extension updates, and database maintenance. Create, test, and continuously tune host-based security policies across the enterprise to balance stringent security controls with system operational performance.
• Application & Integrity Control (Solidcore): Plan, configure, and maintain Application Control (Solidcore) in both observation and enforcement modes. Manage dynamic whitelisting, establish trusted execution chains, and configure change control parameters to block unauthorized binaries and scripts.
• Data Protection & Threat Prevention: Design, deploy, and monitor Data Loss Prevention (DLP) Endpoint policies to prevent unauthorized data exfiltration. Configure, deploy, and sustain legacy Enterprise Virus Scan Engines and modern Threat Prevention modules, host-based Firewalls, and Web Control.
• Security, RSD, & Compliance: Implement and enforce DISA Security Technical Implementation Guides (STIGs) across the ePO hierarchy and managed client endpoints. Deploy and manage Rogue System Detection (RSD) sensors and policies to immediately detect, alert, and mitigate unauthorized assets connecting to the network.
• Database & Compliance Reporting: Leverage relational database knowledge to directly interface with Microsoft SQL Server. Write custom SQL queries to troubleshoot ePO database synchronization issues, perform performance tuning, and generate real-time compliance dashboards for senior leadership.

Job Requirements

• High school diploma or equivalent
• Active Secret Clearance

Certification Requirements

• Security+ or equivalent
• DoD Endpoint Security Solutions (ESS) Administrator 201 (formerly HBSS) or higher

The anticipated salary range for this role is $105,000 to $110,000 annually. The anticipated salary range for this position is provided in accordance with applicable pay transparency laws. The final starting salary will be determined based on a variety of job-related factors, including the selected candidate's qualifications, skills, relevant experience, education, certifications, and work location (where applicable), as well as internal equity and market considerations.

We use E-Verify to confirm the identity and employment eligibility of all new hires.