Senior Systems Engineer – Endpoint Security

CACI International; Fort Meade (FL); On-site; USD 132,000 - 290,000; Full time

Job summary

CACI International is seeking a Senior Systems Engineer for the NSA EDR program to advance endpoint security across on‑prem, cloud, and VDI environments. You will shape architecture, deployment, and optimization of Microsoft Defender for Endpoint (MDE) and Trellix HX with KQL and YARA tooling.

You will collaborate with threat hunters and government stakeholders, provide technical guidance, and mentor engineers while ensuring high‑assurance cyber defenses in highly classified settings.

Qualifications

• 20+ years as a Systems Engineer on programs of similar scope and complexity.
• Microsoft Defender for Endpoint architecture and deployment experience.
• Trellix HX deployment, controllers, and rule creation in restricted networks.

Responsibilities

• Lead full lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments.
• Develop deployment strategies and implementation plans for endpoint security platforms.
• Optimize configurations and performance to support mission-critical environments.
• Monitor enterprise endpoint health at scale and respond to incidents with SOC support.
• Mentor junior engineers and collaborate with threat hunters and analysts.

Skills

20+ years experience

MDE expertise

Trellix HX

KQL

YARA

Windows

Linux

macOS internals

DoD IAM II/III

MECM/SCCM

Intune

Education

Bachelor’s degree in Systems Engineering / CS / Information Systems / related field

Tools

MECM/SCCM

Intune

OpenIOC/YARA rules tooling

Job description

Job Title: Senior Systems Engineer – Endpoint Security

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

The Opportunity

CACI is seeking a Senior Systems Engineer that will serve as a principal technical leader and subject matter expert for the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program. Working within a highly classified, multi-domain environment, you will shape the strategic architecture, integration, deployment, and optimization of world‑class endpoint security platforms including Microsoft Defender for Endpoint (MDE) and Trellix HX. This is a chance to directly strengthen national security by engineering resilient endpoint defense capabilities that provide full enterprise visibility, rapid threat containment, and robust configuration management.

Responsibilities

• Lead the full lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on‑premises, cloud, and virtual desktop infrastructures (VDI).
• Develop advanced system engineering documentation, deployment strategies, and implementation plans.
• Optimize agent configurations, exclusion policies, and system performance to ensure mission success and minimize friction across high‑demand environments.
• Monitor and maintain enterprise endpoint health at scale.
• Work directly with threat hunters and intelligence analysts to convert actionable intelligence into custom technical indicators of compromise (IOCs) using KQL and YARA.
• Serve as a primary technical advisor to Government stakeholders regarding system risks, design decisions, and engineering recommendations.
• Provide advanced forensic and technical support to the SOC during high‑priority incidents.
• Mentor junior and mid‑level engineers, fostering growth, collaboration, and technical excellence.

Qualifications:

Required:

• 20+ years of experience as a Systems Engineer on programs of similar scope, type, and complexity.
• Proven experience planning and leading Systems Engineering efforts.
• Bachelor’s degree in Systems Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or a related field from an accredited institution.
• Microsoft Defender for Endpoint Expertise: Hands‑on engineering experience with MDE architecture, deployment via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Proven ability to engineer, deploy, and manage Trellix HX controllers and agents within air‑gapped or highly restricted networks, including creating OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: Deep understanding of Windows, Linux, and macOS internals, including file systems, registries, and process execution behavior.
• Professional Certifications: Compliance with DoD 8570/8140 IAM Level II or III baseline requirements.

Desired:

• Vendor Certifications: Microsoft Security Operations Analyst (SC‑200), Azure Security Engineer (AZ‑500), and/or Trellix engineering certifications.
• Methodologies & Tools: Experience with Model‑Based Systems Engineering (MBSE), Cameo, and Atlassian suite tools such as Jira and Confluence.
• Technical Frameworks: Familiarity with NSA Technical Manual standards (e.g., NSA DS‑89) and defense‑in‑depth engineering principles.
• Core Competencies: Demonstrated collaboration skills, transparency in managing high‑consequence systems, and a passion for developing and mentoring technical talent.

What You Can Expect:

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation’s most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

The proposed salary range for this position is:

$131,800 - $290,000

CACI is anEqualOpportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any otherprotectedcharacteristic.