SYSTEMS ENGINEER LEVEL 3

EOA Technologies; Northern (KY); Hybrid; USD 120,000 - 180,000; Full time

Job summary

EOA Technologies is seeking a System Engineer to lead the architecture, deployment, and optimization of endpoint security platforms, including Microsoft Defender for Endpoint and Trellix HX, for a U.S. Government program.

The role requires top-tier security clearances, deep systems engineering expertise across on-premises and cloud environments, and collaboration with threat intel analysts to develop IOCs. Candidates should have DoD IAM levels and extensive experience in enterprise security

Qualifications

• Active TS/SCI with Polygraph security clearance is required.
• Expertise with MDE architecture and deployment (MECM/SCCM or Intune).
• Experience engineering Trellix HX controllers and agents in restricted networks.
• Strong understanding Windows, Linux, macOS internals and forensics.
• DoD 8570/8140 IAM Level II or III baseline certifications.
• Twenty (20) years' experience as a SE in programs and contracts of similar scope.
• Bachelor’s degree in a related discipline is required or 5 years substituted.

Responsibilities

• Lead lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments.
• Author engineering plans, tune configurations, monitor endpoint health at scale.
• Translate threat intel into IOCs using KQL and YARA rules.
• Act as senior technical advisor to Government stakeholders and mentor engineers.

Skills

TS/SCI clearance

Systems engineering leadership

Threat intel to IOCs

Mentoring junior staff

Education

Bachelor’s degree in System Engineering/CS/IS or related

5 years SE experience may substitute for a bachelor’s degree

Tools

MECM/SCCM

Intune

Kusto Query Language (KQL)

YARA rules

OpenIOC

Trellix HX controllers/agents

Job description

Description

EOA Technologies is seeking a System Engineer on one of our subcontracts. This is a full-time position offering the opportunity to support a U.S. Government customer. You will serve as a principal technical leader and subject matter expert within the agencies Enterprise Endpoint Detection and Response (EDR) Program. Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission-critical assets to defend national security infrastructure against sophisticated cyber threats.

Essential Duties and Responsibilities:

• Leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI).
• This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction and monitoring overall endpoint health at scale.
• The engineer will collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules.
• Additionally, the individual will act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high-priority incidents, and actively mentor junior and mid-level engineering personnel within the program.

Requirements

To be considered for this position you must have the following:

• Possess an active TS/SCI with Polygraph security clearance
• Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
• Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
• Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.
• Twenty (20) years' experience as a SE in programs and contracts of similar scope, type and complexity is required. Demonstrated experience in planning and leading Systems Engineering efforts is required.
• Bachelor’s degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related discipline from an accredited college or university is required.
• Five (5) years of additional SE experience may be substituted for a bachelor’s degree.

Desired:

• Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
• Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
• Technical Frameworks: Familiarity with NSA Technical Manual Standards (e.g., NSA DS-89) and defense-in-depth engineering principles.
• Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for developing technical leadership pipelines.

Employment decisions are based solely on qualifications, merit, and business needs - not on any protected characteristic. EOA Technologies, LLC provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, ancestry, marital status, religious affiliation, hairstyle, or any other characteristic protected by federal, state or local laws. EOA is committed to providing reasonable accommodations when feasible to individuals with disabilities.