Zero Trust Engineer — Navy/DoD SecOps (Tanium, Azure)

G2IT; Suitland (MD); On-site; USD 158,000 - 193,000; Full time

Job summary

G2IT is seeking a Zero Trust Engineer to design, implement, and sustain Zero Trust capabilities across Navy and DoD enterprise environments, integrating endpoint visibility, vulnerability management, and cloud security.

The ideal candidate will have hands-on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Microsoft Defender, Azure, and Azure Bicep to build an integrated security architecture rather than standalone tools.

Qualifications

• Hands-on experience deploying and sustaining Zero Trust security in DoD or government environments.
• Strong knowledge of Tanium, Eclypsium, SteelCloud ConfigOS, Defender, Azure, and IaC with Azure Bicep.
• Experience with DISA STIGs, RMF controls, and DoD cybersecurity policies.

Responsibilities

• Engineer, deploy, configure, integrate, and sustain Zero Trust in Navy/DoD environments.
• Implement Zero Trust principles per DoD Strategy and Roadmap with continuous verification and least-privilege access.
• Deploy and administer Tanium for endpoint visibility, vulnerability management, and remediation.
• Implement and support Eclypsium for firmware, hardware, and device security visibility.
• Engineer and administer SteelCloud ConfigOS to automate STIG compliance and remediation.
• Configure Microsoft Defender for endpoint protection, detection, and response.
• Design secure Microsoft Azure environments with governance, monitoring, and logging.
• Develop Azure Bicep IaC templates for repeatable deployments.

Skills

Tanium

Eclypsium

SteelCloud ConfigOS

Microsoft Defender

Microsoft Azure

Azure Bicep

Tools

Tanium

Eclypsium

SteelCloud ConfigOS

Microsoft Defender

Microsoft Azure

Azure Bicep

Job description

G2IT is seeking a Zero Trust Engineer to design, implement, and sustain Zero Trust capabilities across Navy and DoD enterprise environments, integrating endpoint visibility, vulnerability management, and cloud security.

The ideal candidate will have hands-on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Microsoft Defender, Azure, and Azure Bicep to build an integrated security architecture rather than standalone tools.