Zero Trust Engineer (DoD/Navy) – Tanium & Azure

G2IT, LLC.; Suitland (MD); Hybrid; USD 130,000 - 150,000; Full time

Job summary

G2IT, LLC. is seeking an experienced Zero Trust Engineer to design, implement, and sustain Zero Trust across Navy and DoW environments.

You will integrate endpoint visibility, vulnerability management, and cloud security capabilities to build an integrated security architecture. The role requires hands-on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Defender, and Azure, plus experience delivering managed security in classified environments.

Qualifications

• Active TS/SCI clearance.
• 7+ years in cybersecurity/systems/cloud/infrastructure, with DoD/IC exposure.
• Hands-on experience with Zero Trust architectures in complex environments.
• Experience with Tanium, Eclypsium, SteelCloud ConfigOS, Defender, Azure, and Azure Bicep.

Responsibilities

• Engineer, deploy, configure, integrate, and sustain Zero Trust capabilities across Navy/DoW environments.
• Implement Zero Trust principles per DoD strategy and roadmap.
• Deploy and administer Tanium for endpoint visibility, vulnerability management and remediation.
• Implement Eclypsium for firmware and device security visibility and risk identification.
• Configure SteelCloud ConfigOS for STIG compliance and continuous configuration management.
• Integrate Defender capabilities for endpoint protection, threat detection, and response.
• Design secure Azure environments with IAM, policies, networking, monitoring and logging.
• Develop IaC templates in Azure Bicep for repeatable deployments.
• Create architecture diagrams, SOPs, and runbooks for zero trust implementations.

Skills

Zero Trust

DoD experience

Security architecture

Tools

Tanium

Eclypsium

SteelCloud ConfigOS

Microsoft Defender

Microsoft Azure

Azure Bicep

Job description

G2IT, LLC. is seeking an experienced Zero Trust Engineer to design, implement, and sustain Zero Trust across Navy and DoW environments.

You will integrate endpoint visibility, vulnerability management, and cloud security capabilities to build an integrated security architecture. The role requires hands-on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Defender, and Azure, plus experience delivering managed security in classified environments.