Trellix/MDE Systems Engineer 3

Lentech, Inc.; Fort Meade (MD); On-site; USD 203,305 - 217,122; Full time

Job summary

Lentech, Inc. seeks a Senior Systems Engineer (Level 3) to lead the Enterprise Endpoint Detection and Response program for national security initiatives.

The role focuses on architecture, end-to-end integration, deployment, and optimization of Microsoft Defender for Endpoint and Trellix HX across hybrid, air‑gapped, and high‑security environments. You will bridge architecture with operations, ensuring endpoint visibility and threat containment.

Qualifications

• 20+ years of SE experience in large programs and contracts
• Active TS.SCI w FSP through MD
• DoD 8570/8140 IAM Level II or III baseline certifications
• MDE architecture, deployment via MECM/SCCM or Intune, policy ring management, advanced hunting with KQL
• Trellix HX experience in air-gapped or restricted networks, OpenIOC and YARA rule creation
• Windows, Linux and macOS internals knowledge

Responsibilities

• Lead lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments
• Author complex system engineering and implementation plans, tune configurations and exclusion policies
• Monitor endpoint health at scale and ensure threat containment
• Collaborate with threat hunting/intelligence to translate IOC findings into technical indicators
• Advise government stakeholders on system risks and engineering considerations
• Mentor junior/mid-level engineers in the program

Skills

20+ years SE experience

TS.SCI w FSP through MD

IAM DoD 8570/8140 Level II/III

MDE expertise

KQL

YARA rules

OpenIOC

Trellix HX expertise

Windows internals

Linux/macOS internals

Education

Bachelor’s degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related discipline

Five years SE experience may substitute for bachelor’s

Tools

MECM/SCCM Deployment

Intune

SCCM/MECM

Trellix HX controllers/agents

Job description

Description

• The Senior Systems Engineer (Level 3) serves as a principal technical leader and subject matter expert within the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program
• Operating in a highly classified, multi‑domain infrastructure, the successful candidate will drive the strategic architectural design, end‑to‑end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX
• This critical role bridges high‑level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission‑critical assets to defend national security infrastructure against sophisticated cyber threats

Responsibilities

• The Systems Engineer 3 is responsible for leading the lifecycle engineering and scale‑out architecture of MDE and Trellix HX across hybrid environments, including on‑premises, cloud, and virtual desktop infrastructures (VDI)
• This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction, and monitoring overall endpoint health at scale
• The engineer will collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules
• Additionally, the individual will act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high‑priority incidents, and actively mentor junior and mid‑level engineering personnel within the program

Required

• Twenty (20) years experience as a SE in programs and contracts of similar scope, type and complexity is required. Demonstrated experience in planning and leading Systems Engineering efforts is required
• Active and current TS.SCI w FSP through MD
• Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications
• Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL)
• Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air‑gapped or highly restricted networks, including the creation of OpenIOC and YARA rules
• Operating System & Forensic Knowledge: In‑depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics

Education

• Bachelor’s degree in System Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related discipline from an accredited college or university is required
• Five (5) years of additional SE experience may be substituted for a bachelor’s

Lentech, Inc. is an Equal Employment Opportunity (EEO) employer and considers all qualified applicants for employment without regard to race, color, religion, gender identification, national origin, sexual orientation, age, marital status, disability, protected veteran status, or any other factor prohibited by applicable law. We are proud of the diversity of our staff and seek diversity in our applicants.

The proposed salary range for this position is: $$203,305.00 $217,122.00