Senior Endpoint Security Lead | DoD Compliance & IR

NS4 Inc; Virginia; Hybrid; USD 120,000 - 160,000; Full time

Job summary

NS4 Inc. is seeking an experienced Endpoint Security Administrator (Senior/SME) to join the Cyber Security Services team at Fort Lee, VA.

The role focuses on securing the DeCA enterprise's endpoint defenses and ensuring compliance with DoD requirements. The ideal candidate brings deep technical expertise in endpoint protection, incident response, and policy coordination, with strong communication skills and proactive collaboration across business units.

Qualifications

• Active DoD Secret Clearance required.
• IT 521 – Endpoint Security Administrator certification.
• Cyber 212 – Cybersecurity Service Provider (Infrastructure Support) certs.
• 7+ years IT with ≥3 years in endpoint security.
• Experience with Trellix ePolicy Orchestrator (ePO) on-prem and cloud.
• Knowledge of NIST 800-53, RMF and DoD STIGs.
• Endpoint Security Solutions (ESS) Administrator 202 certificate required.
• HBSS Advanced 301 & 501 highly recommended.

Responsibilities

• Ensure compliance with DoD 8140 Cyber Workforce qualification requirements.
• Configure, deploy, and maintain Endpoint Security components and policy management.
• Perform On-Access/On-Demand Scans and manage firewall/web control options.
• Develop and maintain DLP rules and application whitelisting.
• Collaborate with DoD and agency directives change control processes.
• Coordinate with 3rd-party providers and internal technical teams.
• Participate in Incident Response and resolve endpoint tickets within SLAs.
• Maintain endpoint posture, system configuration, and monitoring.
• Analyze syslog/packet data, perform subnetting, and integrate systems across Windows and Linux.
• Generate and coordinate CMRS and compliance reports.

Skills

Communication skills

Incident response

Policy coordination

Security architecture

DoD compliance

Education

DoD 8140 certifications

IT 521 – Endpoint Security Administrator

Cyber 212 – Cybersecurity Service Provider

Endpoint Security Administrator (ESS 202)

HBSS Advanced 301 & 501

Tools

McAfee/Trellix ePO

ENS

DLP

Rogue System Detection

pxGrid

APIs

SAML

Okta

ODBC

Job description

Seeking a highly experienced Endpoint Security Administrator – Senior/SME to join our Cyber Security Services team at Ft. Lee, VA. This role is critical in ensuring the security, compliance, and effectiveness of endpoint defense capabilities across the DeCA enterprise. The ideal candidate is a subject matter expert in endpoint security with deep technical expertise, exceptional communication skills, and a proactive approach to collaboration and incident response.

Key Responsibilities:

• Ensure personnel and practices comply with DoD 8140, Cyber Workforce Qualification Matrix, and associated training repositories

• Configure, deploy, and maintain Endpoint Security (ENS) components and associated policy management

• On-Access/On-Demand Scans

• Firewall and Web Control Options

• Manage Data Loss Prevention (DLP) and Application Whitelisting:

• Develop and maintain DLP rules and policies

• Establish enterprise baselines for application whitelisting (Windows and *NIX)

• Utilize tools and standards including pxGrid, APIs, SAML, Okta, ODBC

• Maintain, monitor, and enforce compliance with all endpoint products:

• TASKORDs and CTO implementation

• Build strong stakeholder relationships across business units within DeCA

• Collaborate on endpoint settings, troubleshooting, and policy coordination across areas of responsibility

• Participate in Incident Response as needed and resolve endpoint-related tickets within established SLAs

• Maintain and document endpoint posture and system configuration

• Manage and validate:

• Rogue System Detection across enterprise subnets

• Endpoint Management Agent settings and updates

• C2C and Quarantine policies to isolate and remediate non-compliant devices

• Analyze syslog and packet data, perform subnetting, and integrate systems across Microsoft and Linux platforms

• Generate and coordinate reports (CMRS, Device/System Tags, ad hoc, compliance tracking)

Preferred Skills & Tools:

• McAfee/Trellix ePO, ENS, DLP, Rogue System Detection

• Intermediate-level systems administration for Microsoft and Linux

• Familiarity with DoD and Agency cybersecurity directives and change control processes

• Ability to coordinate with 3rd-party providers and internal technical teams

Requirements

• Active DoD Secret Clearance (Required)
• Must be qualified under the DoD 8140 Cyber Workforce Qualification Program with the following:
• IT 521 – Endpoint Security Administrator
• Cyber 212 – Cybersecurity Service Provider (Infrastructure Support)
• 7+ years of professional IT experience, including at least 3+ years specializing in endpoint cybersecurity
• Demonstrated experience with Trellix ePolicy Orchestrator (ePO), both on-premises and cloud-based
• Strong grasp of cybersecurity frameworks (NIST 800-53, RMF) and DoD compliance (STIGs, TASKORDs, CTOs)
• Endpoint Security Solutions (ESS) Administrator 202 certificate - Required
• HBSS Advanced 301 & 501 Highly recommended.