IT Systems & Security Engineer (CedD225)

Role Description: We are seeking a Technical Implementation Engineer to join Commercial Cyber Operations. This person will perform hands-on systems work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will implement, test, and document the required technical controls with support from a senior engineer. Responsibilities: The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise. Configure and secure Microsoft 365, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and related business systems. Deploy and operate endpoint-management controls across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune. Implement identity, multifactor authentication, permissions, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. Support Windows, macOS, iOS, Android, networks, firewalls, VPNs, DNS, and secure remote access. Troubleshoot technical issues with customer IT teams, service providers, vendors, and Defense Unicorns engineers. Test completed changes and produce accurate configuration records, diagrams, evidence, and runbooks. Complete assigned implementation work on schedule and raise risks or blockers early. Help turn repeatable work into checklists, scripts, and automation. Minimum Experience and Qualifications: Experience administering, securing, and troubleshooting business IT environments. Hands-on experience with Microsoft 365, Entra ID, Active Directory, and Google Workspace. Mobile device management or unified endpoint management experience across more than one platform, including practical experience with Jamf and Microsoft Intune. Experience supporting Windows and macOS endpoints; experience with iOS and Android is strongly preferred. Familiarity with networking, firewalls, identity, logging, endpoint protection, vulnerability management, patching, and backups. Ability to troubleshoot methodically, document work accurately, and communicate clearly with customers and internal teams. Proven ability to deliver results in a remote, asynchronous environment. US citizenship with CUI access. Preferred Experience and Qualifications: GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android Enterprise, Microsoft Defender, or Microsoft Purview experience. Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls. Cybersecurity Maturity Model Certification (CMMC) 2.0 experience. PowerShell, shell scripting, security monitoring, or workflow-automation experience. Relevant Microsoft, Google, Apple, cloud, networking, or security certifications. Travel Expectations: 10%