Pillar Lead: Device & Endpoint Specialist (R-00212)

This role bridges security engineering and day to day operations by supporting implementation of security capabilities, evaluating technical solutions, maintaining cybersecurity tools, and helping operational teams translate security architecture into effective, repeatable practices. The Cybersecurity Engineer works closely with vulnerability management, incident response, RMF, and ISSO teams to ensure engineering activities directly support operational risk reduction and continuous improvement.

Position Responsibilities

• Develop device and endpoint Zero Trust architecture and implementation patterns.
• Define device identity, posture, health, compliance, endpoint protection, and access signal requirements.
• Assess endpoint and device management technologies for interoperability and contribution to enterprise Zero Trust objectives.
• Support implementation planning, pilot execution, test cases, regression testing, and operational readiness.
• Coordinate device-related dependencies with identity, network, application, data, and automation teams.
• Document implementation results, exceptions, deviations, and recommendations for continuous improvement.

Job Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.
• Five or more years of endpoint security, device management, desktop engineering, or enterprise security engineering experience.
• Experience with endpoint protection, EDR, MDM/UEM, configuration management, and compliance assessment.
• Knowledge of device-centric Zero Trust and conditional access concepts.
• Strong troubleshooting and technical documentation skills.
Preferred Qualifications:
• Experience with Microsoft Intune, Defender, CrowdStrike, Tanium, or comparable enterprise endpoint platforms.
• Experience supporting Federal endpoint security requirements.
• Experience integrating endpoint signals into identity and access decisions.
Preferred Certifications: One or more of the following is preferred:
• Security+
• Microsoft Endpoint Administrator
• CISSP
• CySA+