Security Engineer

789 Chickasaw Service Solutions, LLC; Bethesda (MD); On-site; USD 100,000 - 120,000; Full time

Benefits offered by this job

Medical Dental Vision

401(k) with vesting

Life Insurance

PTO

Professional development

Job summary

Chickasaw Nation Industries, Inc. seeks an Endpoint Security Baseline Engineer to design, implement, validate, and maintain standardized security baselines for Windows and macOS endpoints. You will work across Intune, MECM, and Jamf Pro in highly regulated environments.

The role requires experience with Microsoft security technologies, endpoint hardening, CIS/Microsoft baselines, and enterprise endpoint management. Join a federal contractor committed to security and reliability.

Qualifications

• Experience with endpoint security baselines and hardening.
• Knowledge of CIS Benchmarks and Microsoft Security Baselines.
• Familiarity with Entra ID and Conditional Access.
• Strong scripting and automation skills in PowerShell.

Responsibilities

• Engineer and maintain Intune security baselines and endpoint policies.
• Develop and maintain MECM baselines and Jamf configurations.
• Configure Defender for Endpoint and ASR rules; manage BitLocker and device encryption policies.
• Collaborate with cybersecurity and RMF teams to meet federal requirements.

Skills

Endpoint security

PowerShell

Compliance

Zero Trust

Education

Bachelor's degree

Tools

Microsoft Intune

Microsoft Endpoint Manager

MECM/SCCM

Jamf Pro

Job description

Endpoint Security Baseline Engineer

CNI seeking an Endpoint Security Baseline Engineer to support the engineering, implementation, and operational management of enterprise endpoint security configurations across Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM), and Jamf Pro environments. This role is responsible for designing, implementing, validating, and maintaining standardized security baselines that improve the organization's cybersecurity posture while ensuring operational stability across Windows and macOS endpoints. The ideal candidate possesses experience with Microsoft security technologies, endpoint hardening, compliance policies, CIS and Microsoft Security Baselines, and enterprise endpoint management platforms within highly regulated federal environments.

Chickasaw Nation Industries, Inc. serves as a holding company with multiple subsidiaries engaged in several lines of business (Business Services, Health, Infrastructure and Engineering, Mission Optimization, Technology and Transportation) for the federal government and commercial enterprises. A portion of our profits is used to support Chickasaw citizens. We are proud to support the economic development and long-term viability of the Chickasaw Nation and its people.

Benefits

• CNI offers premium benefits eligible on the first day of hire to full time employees; (Medical - Dental – Vision), Company Life Insurance, Short-Term and Long-Term Disability Insurance, 401(K) Immediate Vesting, Professional Development Assistance, Legal Aid Assistance Program, Family Planning / Fertility Assistance, Personal Time Off, and Observance of Federal Holidays
• Medical Dental Vision 401(k) Family Planning/Fertility Assistance STD/LTD/Basic Life/AD&D Legal-Aid Program Employee Assistance Program (EAP) Paid Time Off (PTO) Training and Development Opportunities

As a federal contractor, CNI is a drug-free workplace and adheres to the Federal Controlled Substance Act.

Essential Requirements

• The ability to obtain, maintain and access classified information at the Public Trust level.
• Strong understanding of cybersecurity frameworks, access control, endpoint security, and incident response.
• Experience administering Microsoft Intune and Microsoft Endpoint Manager.
• Experience with MECM/SCCM administration.
• Experience implementing Microsoft Security Baselines and CIS Benchmarks.
• Knowledge of Microsoft Defender for Endpoint.
• Experience configuring BitLocker, Windows Firewall, ASR rules, Device Control, and endpoint protection policies.
• Familiarity with Entra ID, Conditional Access, RBAC, and device compliance.
• Understanding of NIST 800-53, Zero Trust Architecture, and federal cybersecurity requirements.
• Strong PowerShell scripting experience.
• Excellent troubleshooting and documentation skills.

Preferred Qualifications

• Experience with Jamf Pro administration.
• Experience supporting Azure Virtual Desktop environments.
• Microsoft Intune Administrator Associate (MD-102).
• Microsoft Security Administrator (SC-300 or equivalent).
• CISSP, Security+, or similar security certification.
• Experience supporting HHS, NIH, or other federal agencies.

Essential Duties and Responsibilities

• Engineer and maintain Microsoft Intune Security Baselines, Endpoint Security policies, and Configuration Profiles.
• Develop and maintain Group Policy, MECM Configuration Baselines, and Jamf security configurations.
• Implement Microsoft Defender for Endpoint security settings, attack surface reduction (ASR) rules, firewall policies, BitLocker, FileVault, Credential Guard, Application Control, and device encryption policies.
• Configure compliance policies and Conditional Access dependencies supporting Zero Trust initiatives.
• Validate security baseline deployments through testing, pilot implementations, and production rollout.
• Perform impact assessments for Microsoft monthly security baseline updates and recommend adoption strategies.
• Collaborate with cybersecurity, RMF, ISSO, and engineering teams to ensure endpoint configurations meet organizational security requirements.
• Develop configuration documentation, implementation guides, rollback procedures, and standard operating procedures.
• Support vulnerability remediation initiatives through endpoint configuration changes.
• Troubleshoot policy conflicts between Intune, MECM, Active Directory Group Policy, and Jamf.
• Participate in change management, CAB reviews, and production implementation activities.
• Support enterprise modernization initiatives including Autopilot, cloud-native management, and migration from traditional management solutions.

Education and Experience

• Bachelors degree and 4+ years supporting enterprise endpoint management environments.

Physical Demands

Work is primarily performed in an office environment. Regularly required to sit. Regularly required use hands to finger, handle, or feel, reach with hands and arms to handle objects and operate tools, computer, and/or controls. Required to speak and hear. Occasionally required to stand, walk and stoop, kneel, crouch, or crawl. Must frequently lift and/or move up to 10 pounds and occasionally lift and/or move up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, and ability to adjust focus. Exposed to general office noise with computers printers and light traffic. The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions of this job.

Equal Opportunity Employment

EOE including Disability/Vet.

The estimated pay range for this role is $100,000 to $120,000, with the final offer contingent on location, skillset, and experience.

#INDCNI Chickasaw Nation Industries, Inc. (CNI) is a federally chartered corporation wholly owned by the Chickasaw Nation. Headquartered in Norman, Oklahoma, CNI serves as a holding company with multiple subsidiaries that operate as Limited Liability Companies (LLCs) engaged in several lines of business including Civilian, Defense, Filtration, Network Services, and Research, Development, Test and Evaluation. CNI supports a diverse culture that offers innovative approaches and customer-centered services. When you do business with us, you gain efficient and cost-effective solutions that help safeguard the environment, protect and secure key assets, and connect resources to needs. We are proud to support the economic development of the Chickasaw Nation and to contribute to the tribal mission of enhancing the overall quality of life of the Chickasaw people. A portion of our profits is used to support Chickasaw citizens through a multitude of programs and services such as education, health care, nutrition services, housing programs, legal services, elder and child care and community support programs. Successful economic development is an integral part of the Chickasaw Nation’s operations.