Lead Systems Engineer, Endpoint Security & EDR Architect

Fuse Engineering LLC; Fort Meade (MD); On-site; USD 180,000 - 240,000; Full time

Job summary

Fuse Engineering LLC seeks a Senior Systems Engineer (Level 3) to lead the design, deployment, and optimization of Microsoft Defender for Endpoint and Trellix HX in NSA EDR programs. The role spans on-premises, cloud, and VDI with an emphasis on secure, scalable endpoint architectures.

You will translate threat intel into actionable IOCs, mentor engineers, and provide forensic support during critical incidents while collaborating with government stakeholders to ensure robust defense capabilities.

Qualifications

• Top Secret SCI w/ Maryland Polygraph Security Clearance required.
• MDE architecture, deployment via MECM/SCCM or Intune, policy ring management, and advanced hunting using KQL.
• Trellix HX deployment and management in air-gapped or restricted networks, including YARA rules.
• Windows, Linux, macOS internals and forensic knowledge.
• DoD IAM Level II/III baseline certifications.

Responsibilities

• Lead lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments.
• Author complex system engineering and implementation plans; tune agent configurations and exclusion policies.
• Monitor endpoint health at scale and translate threat intel into technical IOCs using KQL and YARA.
• Serve as primary technical advisor to Government stakeholders on system risks and engineering considerations.
• Provide advanced forensic support to SOC during critical incidents and mentor junior staff.

Skills

MDE architecture

Trellix HX expertise

Threat hunting collaboration

Documentation & mentoring

Forensic support

Education

DoD 8570 IAM Level II/III certification

Tools

Kusto Query Language (KQL)

YARA rules

OpenIOC

MECM/SCCM or Intune

Job description

Fuse Engineering LLC seeks a Senior Systems Engineer (Level 3) to lead the design, deployment, and optimization of Microsoft Defender for Endpoint and Trellix HX in NSA EDR programs. The role spans on-premises, cloud, and VDI with an emphasis on secure, scalable endpoint architectures.

You will translate threat intel into actionable IOCs, mentor engineers, and provide forensic support during critical incidents while collaborating with government stakeholders to ensure robust defense capabilities.