Remote Endpoint Engineer - Cybersecurity Modernization Lead

TIAG; Bethesda (MD); Remote; USD 80,000 - 100,000; Full time

Job summary

TIAG is hiring an Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU) in Bethesda, MD. The role offers mostly remote work with periodic on-site support and requires a Secret clearance to begin.

Key duties include auditing endpoints, deploying CBCM policies, enforcing DoD security standards, and creating SOPs for enterprise hardware management. US citizenship or naturalization is a requirement.

Qualifications

• Secret level clearance required.
• Citizenship in the US or naturalization is required to obtain access.
• Familiarity with federal security standards and DoD security controls is expected.

Responsibilities

• Audit existing desktop/laptop GPOs, hardware endpoints, and local client configurations across HQ (Bethesda, MD), NCR sites, and San Antonio, TX.
• Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.
• Resolve endpoint-level Context-Aware Access (CAA) access issues and device posture evaluation errors.
• Make sure all daily hardware updates, endpoint setups, and device configurations strictly follow required federal accessibility and security rules, including FAR Part 39, Section 508, NIST 800-207 guidelines, and the Department of Defense Zero Trust Reference Architecture (DoD ZTRA).
• Regularly scan hardware endpoints to identify security weaknesses, actively apply software patches, and implement DoD STIGs to harden devices, ensuring all systems remain secure, compliant, and fully operational.
• Author Standard Operating Procedures (SOPs) for enterprise hardware/endpoint management and assist in training government IT personnel.
• Help create a step-by-step project plan (Transition Roadmap) that estimates the time and resources needed to move the agency's devices from their current legacy setup ("As-Is") to the newly designed, modernized security framework ("To-Be").

Skills

Endpoint engineering

Job description

TIAG is hiring an Endpoint Engineer to support a major cybersecurity modernization effort for the Uniformed Services University (USU) in Bethesda, MD. The role offers mostly remote work with periodic on-site support and requires a Secret clearance to begin.

Key duties include auditing endpoints, deploying CBCM policies, enforcing DoD security standards, and creating SOPs for enterprise hardware management. US citizenship or naturalization is a requirement.