Senior Endpoint Security Architect (Trellix & Elastic Defend)

Special-Aerospace-Security-Services-Inc; Fort Meade (MD); Hybrid; USD 125,000 - 160,000; Full time

Job summary

Special-Aerospace-Security-Services-Inc in Adelphi/Fort Meade area seeks a Senior Endpoint Security Systems Engineer to lead Trellix ePO deployment and host-based defense across Windows, Linux, and macOS. The role focuses on on-prem and IaaS environments, with Hybrid work pattern.

You will work with mission owners and cyber teams to design, deploy, and optimize endpoint protection, implement policy tuning, and maintain compliance with DISA STIGs.

Qualifications

• 8+ years of systems engineering/endpoint security experience.
• Active TS/SCI clearance; U.S. citizenship required.
• Experience administering Trellix ePolicy Orchestrator (ePO) and Trellix Endpoint Security suite.

Responsibilities

• Maintain and harden Trellix ePO consoles across multi-tier networks and cloud-connected management VPCs.
• Engineer, deploy, and sustain Trellix suite with Elastic Agent and Elastic Defend.
• Integrate endpoint agents across on-prem and cloud IaaS for Windows, Linux, and macOS.
• Design, benchmark, and deploy policies, exclusions, and DLP rules to protect hosts without hurting performance.
• Diagnose and remediate connectivity, registration, and deployment issues in hybrid networks.

Skills

Trellix ePO

Endpoint Security

Cross‑platform support

DoD 8140 compliance

PowerShell/Bash/Python

Cloud IaaS security

Policy & Compliance

Education

Bachelor’s degree in Cybersecurity/CS/STEM/IT

Master’s degree in Cybersecurity/related field

CSSP-Infrastructure Support / CSSP-Analyst / IAT Level II/III certs (CEH/CySA+/GCIH/GCFA/CISM/Spe)

Tools

Trellix ePO

Trellix Endpoint Security (ENS)

Elastic Defend for Endpoint

Elastic Agent

JAMF Pro (macOS management)

DISA COAMS/CMRS

Job description

Special-Aerospace-Security-Services-Inc in Adelphi/Fort Meade area seeks a Senior Endpoint Security Systems Engineer to lead Trellix ePO deployment and host-based defense across Windows, Linux, and macOS. The role focuses on on-prem and IaaS environments, with Hybrid work pattern.

You will work with mission owners and cyber teams to design, deploy, and optimize endpoint protection, implement policy tuning, and maintain compliance with DISA STIGs.