Zero Trust Engineer – Tanium / Eclypsium / SteelCloud / Microsoft Defender / Azure

G2IT; Suitland (MD); On-site; USD 158,000 - 193,000; Full time

Job summary

G2IT is seeking a Zero Trust Engineer to design, implement, and sustain Zero Trust capabilities across Navy and DoD enterprise environments, integrating endpoint visibility, vulnerability management, and cloud security.

The ideal candidate will have hands-on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Microsoft Defender, Azure, and Azure Bicep to build an integrated security architecture rather than standalone tools.

Qualifications

• Hands-on experience deploying and sustaining Zero Trust security in DoD or government environments.
• Strong knowledge of Tanium, Eclypsium, SteelCloud ConfigOS, Defender, Azure, and IaC with Azure Bicep.
• Experience with DISA STIGs, RMF controls, and DoD cybersecurity policies.

Responsibilities

• Engineer, deploy, configure, integrate, and sustain Zero Trust in Navy/DoD environments.
• Implement Zero Trust principles per DoD Strategy and Roadmap with continuous verification and least-privilege access.
• Deploy and administer Tanium for endpoint visibility, vulnerability management, and remediation.
• Implement and support Eclypsium for firmware, hardware, and device security visibility.
• Engineer and administer SteelCloud ConfigOS to automate STIG compliance and remediation.
• Configure Microsoft Defender for endpoint protection, detection, and response.
• Design secure Microsoft Azure environments with governance, monitoring, and logging.
• Develop Azure Bicep IaC templates for repeatable deployments.

Skills

Tanium

Eclypsium

SteelCloud ConfigOS

Microsoft Defender

Microsoft Azure

Azure Bicep

Tools

Tanium

Eclypsium

SteelCloud ConfigOS

Microsoft Defender

Microsoft Azure

Azure Bicep

Job description

Zero Trust Engineer – Tanium / Eclypsium / SteelCloud / Microsoft Defender / Azure

Suitland, Maryland, United States

Zero Trust Engineer – Tanium / Eclypsium / SteelCloud / Microsoft Defender / Azure Salary 175

Clearance: Active TS/SCI
Location: Customer/DoD facility; on-site/hybrid as mission requirements permit
Environment: U.S. Navy / Department of War classified and mission-critical networks

Position Overview

G2IT is seeking an experienced Zero Trust Engineer to design, implement, integrate, and sustain Zero Trust capabilities across classified and unclassified Navy and DoW enterprise environments. The engineer will support the modernization and hardening of complex IT environments by integrating endpoint visibility, vulnerability and firmware security, configuration compliance, threat protection, identity, and cloud security capabilities.

The ideal candidate has hands‑on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Microsoft Defender, Microsoft Azure, and Azure Bicep, and understands how these technologies contribute to an integrated Zero Trust architecture rather than operating as independent security tools.

Key Responsibilities

• Engineer, deploy, configure, integrate, and sustain Zero Trust security capabilities across Navy and DoW enterprise environments.
• Implement Zero Trust principles consistent with DoD Zero Trust Strategy and Zero Trust Capability Execution Roadmap, including continuous verification, least-privilege access, endpoint/device trust, visibility, automation, and policy enforcement.
• Deploy and administer Tanium capabilities supporting endpoint visibility, asset discovery, vulnerability management, configuration management, compliance, and remediation.
• Implement and support Eclypsium for firmware, hardware, supply‑chain, and device‑level security visibility and risk identification.
• Engineer and administer SteelCloud ConfigOS to automate STIG compliance, security configuration, remediation, and continuous compliance activities.
• Configure and integrate Microsoft Defender capabilities for endpoint protection, threat detection, vulnerability management, investigation, and response.
• Design and support secure Microsoft Azure environments, including implementation of security controls, policies, identity, networking, monitoring, and logging.
• Develop and maintain Azure Bicep Infrastructure-as-Code (IaC) templates to provide repeatable, controlled, and auditable deployment of Azure infrastructure and security configurations.
• Integrate security platforms and telemetry to establish a consolidated view of device posture, vulnerability, configuration compliance, threats, and remediation status.
• Develop automated workflows for identifying, prioritizing, and remediating vulnerabilities and configuration deficiencies.
• Support implementation and validation of DISA STIGs, Security Technical Implementation requirements, RMF controls, and applicable DoD cybersecurity policies