Junior Endpoint Engineer

TIAG; Chevy Chase (MD); Hybrid; USD 70,000 - 100,000; Full time

Job summary

TIAG is seeking a Junior Endpoint Engineer to support a major cybersecurity modernization for USU. The role is onsite in a Hybrid capacity at Bethesda, MD and requires a Secret level clearance to begin work.

You will assist senior engineers in migrating ~3,000 endpoints from Trellix to Microsoft Defender for Endpoint (MDE) and help with encryption key escrow and STIG validation across Windows, macOS, and Linux.

Qualifications

• Active DoD Secret clearance required.
• 1–3 years IT support, systems administration or endpoint management.
• Experience with MECM/SCCM deployment and automation.
• Familiarity with Windows, macOS and Linux environments.
• Knowledge of BitLocker and FileVault encryption concepts.
• Certifications: IAM/IAT (Security+), MD-102 or SC-900 preferred.

Responsibilities

• Assist in high-velocity deployment of MDE via MECM/SCCM across Windows, macOS and Linux.
• Monitor Defender portal during deployment waves and track failures.
• Uninstall legacy Trellix agents after MDE verification.
• Support transition of disk encryption management to native OS tools (BitLocker/FileVault).
• Ensure encryption recovery keys are escrowed in Entra ID and verify STIG compliance at agent level.
• Document blockers and coordinate with senior engineers and Government IT staff.

Skills

IT support

Systems administration

Endpoint management

Education

DoD 8570 IAM/IAT certification (e.g., Security+ CE)

MD-102 or SC-900

CompTIA A+, Network+

Tools

MECM/SCCM

Entra ID

BitLocker

FileVault

Job description

TIAG is now hiring a Junior Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU). This role reports onsite in a Hybrid capacity at the customer location in Bethesda, MD. This position requires a Secret level clearance to be processed in order to begin work, so US or Naturalized Citizenship is a requierment.In this role the candidate will assist the Lead Security Architect and senior engineers in migrating approximately 3,000 heterogeneous endpoints (Windows, macOS, and Linux) from a legacy Trellix environment to Microsoft Defender for Endpoint (MDE).Key ResponsibilitiesAssist in executing high-velocity rollouts of the MDE agent to Windows, macOS, and Linux systems using Microsoft Endpoint Configuration Manager (MECM/SCCM) and automated deployment scripts.Monitor the Microsoft Defender portal during deployment waves to verify that endpoints are establishing active, error-free telemetry reporting. Track failed deployments and retry statuses.Assist in systematically uninstalling legacy Trellix agents across all supported operating systems once MDE telemetry is verified.Support the transition of disk encryption management from Trellix to native OS tools, specifically BitLocker for Windows and FileVault for macOS.Help verify that all native encryption recovery keys are successfully escrowed and protected within Entra ID to prevent any loss of access.Support manual reviews and compliance checks to ensure applied DISA Security Technical Implementation Guides (STIGs) are correctly functioning at the agent level.Document device-specific blockers and agent conflicts that require further troubleshooting by senior engineers or Government IT staff.Required Experience:Active DoD Secret clearance.1–3 years of hands-on experience in IT support, systems administration, or endpoint management.Familiarity with enterprise deployment tools such as MECM/SCCM.Basic administrative knowledge across multiple operating systems, including Windows, macOS, and Linux.Understanding of disk encryption tools like BitLocker and FileVault.DoD 8570.01-M Information Assurance Management (IAM) Level I or Information Assurance Technical (IAT) Level II certification (e.g., CompTIA Security+ CE).Microsoft 365 Certified: Endpoint Administrator Associate (MD-102) or foundational Microsoft certifications (e.g., SC-900).CompTIA A+, Network+, or basic OS-specific certifications (Windows/macOS).TIAG is an equal opportunity employer and federal contractor or subcontractor. Consequently, the parties agree that, as applicable, they will abide by the requirements of 41 CFR 60-1.4(a), 41 CFR 60-300.5(a), and 41 CFR 60-741.5(a) and employment decisions shall be based solely on merit and without regard disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations. TIAG takes proactive steps to employ and advance in employment qualified individuals without regard to disability or protected veteran status. The parties also agree that, as applicable, they will abide by the requirements and may be subject and required to take action pursuant to the following laws and accompanying regulations:The Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended (and its implementing regulations at 41 C.F.R. 60-300);Section 503 of the Rehabilitation Act of 1973, as amended (and its implementing regulations at 41 C.F.R 60-741); andExecutive Order 13496 (and its implementing regulations at 29 C.F.R. part 471, Appendix A to Subpart A).