Senior IT Systems & Security Engineer (CedD226)

Role Description: We are seeking a Senior Technical Implementation Engineer to join Commercial Cyber Operations. This person will lead hands-on technical work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will design, implement, and validate the systems that support those requirements. Responsibilities: The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise. Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead. Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments. Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune. Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access. Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues. Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks. Guide other implementation engineers and turn repeatable work into standards, scripts, and automation. Minimum Experience and Qualifications: Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments. Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace. Broad mobile device management and unified endpoint management experience across multiple platforms, with strong practical experience using Jamf and Microsoft Intune. Experience managing Windows, macOS, iOS, and Android devices. Experience with networking, firewalls, VPNs, identity, logging, endpoint protection, vulnerability management, patching, and backup systems. Ability to lead customer implementations, make sound technical decisions independently, and explain those decisions in plain English. Ability to produce accurate technical documentation and work effectively in a remote, asynchronous environment. US citizenship with CUI access. Preferred Experience and Qualifications: GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android Enterprise, Microsoft Defender, or Microsoft Purview experience. Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls. Cybersecurity Maturity Model Certification (CMMC) 2.0 experience. PowerShell, shell scripting, infrastructure as code, security monitoring, or workflow-automation experience. Relevant Microsoft, Google, Apple, cloud, networking, or security certifications. Travel Expectations: 10%-25% Full compensation packages are based on candidate experience. Compensation ranges are established using national benchmarking data and apply across all geographic locations within the United States. Remote