Senior Endpoint Security Engineer – TS Clearance

Systems Plus, Inc.; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Bonus program

Competitive benefits

Job summary

Systems Plus, Inc. in Washington, DC, is seeking an experienced security engineering professional for a full-time, hybrid position focused on imaging, patching, and endpoint management across Windows and macOS.

A Top Secret clearance is required, with duties spanning engineering design, validation, and remediation within defense and federal contracts. You will automate deployments using Ivanti, KACE, Intune, Autopilot, and JAMF Pro, produce telemetry, and support incident response and audit

Qualifications

• Eight years of experience in IT, Endpoint Engineering, or Cybersecurity.
• Six years of experience performing engineering functions in enterprise environments.
• Bachelor’s degree or equivalent experience; formal education may be waived.
• Experience with change control, audit, and security governance processes.

Responsibilities

• Design, implement, and tune engineering controls to detect and limit initial compromise and lateral movement.
• Design, implement, and maintain standardized endpoint configurations with Ivanti, KACE, Intune, and Windows Autopilot.
• Own imaging and patching processes for secure workstation builds and remediation.
• Ensure device enrollment, provisioning, decommissioning, and lifecycle visibility."
• Ensure telemetry flows to central systems for detection and forensics.

Skills

Endpoint Engineering

Cybersecurity

Windows/macOS Imaging

Image Automation

Intune/Autopilot

JAMF Pro

Passwordless Auth

Endpoint Telemetry

SIEM/EDR

Education

Bachelor’s degree in IT or related field

Tools

Ivanti

KACE

Microsoft Intune

Windows Autopilot

JAMF Pro

YubiKey/CAC auth

Microsoft Sentinel

Job description

Systems Plus, Inc. in Washington, DC, is seeking an experienced security engineering professional for a full-time, hybrid position focused on imaging, patching, and endpoint management across Windows and macOS.

A Top Secret clearance is required, with duties spanning engineering design, validation, and remediation within defense and federal contracts. You will automate deployments using Ivanti, KACE, Intune, Autopilot, and JAMF Pro, produce telemetry, and support incident response and audit