HBSS/MDE Administrator SME

Job Summary:

What’s in it for you:

• Join a premier technology firm specializing in innovative solutions. 
• Be part of a collaborative, inclusive, and innovative work culture. 
• Enjoy tremendous growth potential in a high-performing team environment. 
• A robust benefits package:
• Health, dental, and vision insurance 
• Life insurance 
• Short-and-long term disability 
• Paid time off (PTO) 
• 401k retirement plan with employer match
• Annual Professional Development Reimbursement Program 
• And more!

What you will do:

• Apply Security Technical Implementation Guides (STIGs), managing system patches, and overseeing vulnerability management processes
• Ensuring the security and integrity of IT systems by running their Endpoint Security with experience in Trellix and Microsoft Defender.
• identifying points of vulnerability, non-compliance with established Information Assurance (IA) guidelines and regulations and recommend mitigation strategies, along with assisting users as needed in a classified computing environment.
• work independently as well as with a team of IT analysts, administrators, and engineers.
• excellent communications skills, both verbal and written
• work in a high-energy environment and adapt to shifting priorities.
• Responsible for migration from Trellix to Microsoft Defender
• Cloud experience since InTune, which will manage MDE
• Continuous upkeep, monitoring, analysis, and response to Information System, network and security events using Endpoint Security tools such as Trellix and Microsoft Defender.
• STIG Application and Compliance:
• Implement and maintain Security Technical Implementation Guides (STIGs) on Endpoint Security Tools.
• Conduct regular STIG compliance checks using tools like SCAP Compliance Checker and STIG Viewer.
• Document STIG configurations and remediation actions to ensure audit readiness.
• Patching and System Updates:
• Manage and deploy operating systems and application patches in accordance with federal patch management policies.
• Coordinate patch schedules to minimize operational impact while meeting compliance deadlines.
• Verify patch deployment success and troubleshoot any issues arising from updates.
• System Hardening:
• Harden systems by applying best practices and federal security guidelines to reduce attack surfaces.
• Maintain configuration baselines and ensure systems adhere to DoD and NIST standards.
• Incident Response Support:
• Participates in internal/external security audits/inspections; performs risk assessments and Continuous Monitoring.
• Assist in identifying and responding to security incidents related to vulnerabilities or misconfigurations.
• Document incidents and contribute to after-action reports for continuous improvement.
• Collaboration and Reporting:
• Work closely with system administrators, engineering staff, and compliance teams to ensure cohesive security operations.
• Prepare detailed reports and briefings for federal clients on STIG compliance, patching status, and vulnerability management efforts. 
• Develop, implement and enforce Information Security Policies and Procedures.
• Tool Utilization:
• Trellix and Microsoft Defender.

What you will bring:

• BS bachelor’s degree with 12-15 years’ experience or 16+ years of IA experience without a degree.  Specific experience, education and training may be considered in lieu of degree.
• A Current DoD 8570 baseline certification
• Understanding of the Risk Management Framework (RMF), NIST, ICD, and CNSS standards.
• Familiarity with network technologies (LAN & WAN) and best practices within a classified environment to include crypto and key management
• STIG compliance, SCC and STIG Viewer experience, and ACAS expertise.
• Expert with Microsoft Windows, Linux, and system virtualization in a secure network environment.
• Must be able to work in a constantly changing regulatory environment with short-, mid-, and long-term timelines for remediating any non-compliance
• Must be able to work well within a team environment and able to adapt quickly to change
• Good writing and verbal presentation skills
• Must possess an active DoD TS/SCI Clearance at time of consideration.

How you will wow us:

• Security+ or CISSP or equivalent
• DoD IS knowledge and experience
• Security hardening scripting/automation experience
• Ansible and or MECM experience
• Microsoft OS Certification (MCSE Win 7 or other)
• Linux certification (RHCSA, CompTIA Linux, LCFS/LCFE, etc.)

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

Commitment to Non-Discrimination