Hybrid Endpoint Engineer — MDE Rollouts & Encryption (Secret)

TIAG; Chevy Chase (MD); Hybrid; USD 70,000 - 100,000; Full time

Job summary

TIAG is seeking a Junior Endpoint Engineer to support a major cybersecurity modernization for USU. The role is onsite in a Hybrid capacity at Bethesda, MD and requires a Secret level clearance to begin work.

You will assist senior engineers in migrating ~3,000 endpoints from Trellix to Microsoft Defender for Endpoint (MDE) and help with encryption key escrow and STIG validation across Windows, macOS, and Linux.

Qualifications

• Active DoD Secret clearance required.
• 1–3 years IT support, systems administration or endpoint management.
• Experience with MECM/SCCM deployment and automation.
• Familiarity with Windows, macOS and Linux environments.
• Knowledge of BitLocker and FileVault encryption concepts.
• Certifications: IAM/IAT (Security+), MD-102 or SC-900 preferred.

Responsibilities

• Assist in high-velocity deployment of MDE via MECM/SCCM across Windows, macOS and Linux.
• Monitor Defender portal during deployment waves and track failures.
• Uninstall legacy Trellix agents after MDE verification.
• Support transition of disk encryption management to native OS tools (BitLocker/FileVault).
• Ensure encryption recovery keys are escrowed in Entra ID and verify STIG compliance at agent level.
• Document blockers and coordinate with senior engineers and Government IT staff.

Skills

IT support

Systems administration

Endpoint management

Education

DoD 8570 IAM/IAT certification (e.g., Security+ CE)

MD-102 or SC-900

CompTIA A+, Network+

Tools

MECM/SCCM

Entra ID

BitLocker

FileVault

Job description

TIAG is seeking a Junior Endpoint Engineer to support a major cybersecurity modernization for USU. The role is onsite in a Hybrid capacity at Bethesda, MD and requires a Secret level clearance to begin work.

You will assist senior engineers in migrating ~3,000 endpoints from Trellix to Microsoft Defender for Endpoint (MDE) and help with encryption key escrow and STIG validation across Windows, macOS, and Linux.