Remote Endpoint Security Engineer (Secret Clearance)

TIAG; Chevy Chase (MD); Remote; USD 110,000 - 160,000; Full time

Job summary

TIAG is seeking an Endpoint Engineer to support a major cybersecurity modernization for USU. The role can be primarily remote with periodic on-site support at Bethesda, MD. A Secret clearance is required to start, with Citizenship or naturalization mandatory.

Responsibilities include auditing GPOs, deploying CBCM, addressing CAA and posture issues, applying DoD security standards, and drafting SOPs for government IT teams. The position emphasizes training and transition planning.

Qualifications

• Bachelor's degree in Computer Hardware Engineering, Computer Science, Information Systems, or equivalent experience.
• 5+ years of experience in enterprise endpoint management, hardware deployment, and OS policy administration within DoD or federal agencies.
• Hands-on experience with Windows GPOs, Chrome OS/CBCM, MDM solutions, and multi-OS enterprise client hardware.

Responsibilities

• Audit desktop/laptop GPOs, hardware endpoints, and local configurations across Bethesda HQ, NCR sites, and San Antonio.
• Deploy, configure, and troubleshoot CBCM cloud agents and Chrome browser policies across Windows, macOS, Chrome OS, and mobile endpoint hardware.
• Resolve endpoint Context-Aware Access (CAA) access issues and device posture evaluation errors.
• Ensure daily hardware updates, endpoint setups, and device configurations follow FAR 39, Section 508, NIST 800-207, and DoD ZTRA.
• Regularly scan hardware endpoints to identify security weaknesses, apply patches, and implement DoD STIGs.
• Author SOPs for enterprise hardware/endpoint management and assist in training government IT personnel.
• Create a Transition Roadmap to move devices from As-Is to To-Be.
• Lead hands-on training sessions and prepare materials for government IT/Security Operations teams.

Skills

Windows GPOs

Chrome OS/CBCM

MDM solutions

Multi-OS enterprise hardware

Education

Bachelor's degree in Computer Hardware Engineering, Computer Science, Information Systems, or equivalent experience

Job description

TIAG is seeking an Endpoint Engineer to support a major cybersecurity modernization for USU. The role can be primarily remote with periodic on-site support at Bethesda, MD. A Secret clearance is required to start, with Citizenship or naturalization mandatory.

Responsibilities include auditing GPOs, deploying CBCM, addressing CAA and posture issues, applying DoD security standards, and drafting SOPs for government IT teams. The position emphasizes training and transition planning.