Note: The job is a remote job and is open to candidates in USA. DecisionPoint Corporation supports the Government Publishing Office's SecDevOps program by delivering secure, compliant, and resilient federal IT services. The Zero Trust Security Engineer - SME will lead Zero Trust Architecture implementation, Microsoft Defender for Endpoint deployment, cybersecurity risk assessments, security control validation, and alignment with NIST, RMF, and FISMA requirements across enterprise systems.
Responsibilities
- Oversee technical planning, scripting, testing, and enterprise-wide deployment of Microsoft Defender for Endpoint agents
- Coordinate onboarding of target endpoints using Microsoft Intune or Active Directory Group Policy
- Ensure proper telemetry reporting, endpoint visibility, and adherence to Microsoft security best practices. Create and maintain security control test results, asset inventories, and remediation documentation in GRC repositories
- Contribute to RMF artifact generation such as POA&Ms, data flow diagrams, and patch/upgrade schedules
- Ensure all documentation reflects the latest changes to production environments and security tools
- Lead architectural reviews and risk posture assessments to identify cybersecurity gaps and recommend remediation strategies
- Evaluate logging efficiency, rule tuning, and threat detection performance across SIEM and endpoint platforms
- Conduct quarterly executive reviews and operational touchpoints to align security posture with mission goals
- Contribute to the development and maintenance of RMF documentation (POA&Ms, Security Assessment Reports, Security Plans)
- Validate and document security controls for systems affected by Defender and other ZTA tooling
- Ensure compliance with NIST SP 800-53, 800-37, and FISMA standards across security solutions
Skills
- 10 years of experience in cybersecurity engineering, with 3+ years in Zero Trust or endpoint security domains
- Bachelor's degree in Computer Science, Information Systems, other related disciplines (or equivalent experience)
- Demonstrated expertise with Microsoft Defender suite, Intune, and Azure-based security solutions
- Proven ability to lead enterprise-wide cybersecurity solution design, deployment, and validation
- Microsoft Certified: Security Operations Analyst Associate (SC-200), Microsoft Certified: Cybersecurity Architect Expert (SC-100), or CISSP (Certified Information Systems Security Professional) required
- Federal experience (preferred)
Benefits
- Remote work; candidates located in the Washington, DC metropolitan area (DMV) are highly preferred.
Company Overview
Company H1B Sponsorship