layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

Zero Trust Engineer – Tanium / Eclypsium / SteelCloud / Microsoft Defender / Azure at G2IT | LAYIQ

Engineer, deploy, configure, integrate, and sustain Zero Trust security capabilities across Navy and DoW enterprise environments.
Implement Zero Trust principles consistent with DoD Zero Trust Strategy and Zero Trust Capability Execution Roadmap
, including continuous verification, least-privilege access, endpoint/device trust, visibility, automation, and policy enforcement.
Deploy and administer
Tanium capabilities supporting endpoint visibility, asset discovery, vulnerability management, configuration management, compliance, and remediation.
Implement and support
Eclypsium for firmware, hardware, supply-chain, and device-level security visibility and risk identification.
Engineer and administer
SteelCloud ConfigOS to automate STIG compliance, security configuration, remediation, and continuous compliance activities.
Configure and integrate
Microsoft Defender capabilities for endpoint protection, threat detection, vulnerability management, investigation, and response.
Design and support secure
Microsoft Azure environments, including implementation of security controls, policies, identity, networking, monitoring, and logging.
Develop and maintain
Azure Bicep Infrastructure-as-Code (IaC) templates to provide repeatable, controlled, and auditable deployment of Azure infrastructure and security configurations.
Integrate security platforms and telemetry to establish a consolidated view of device posture, vulnerability, configuration compliance, threats, and remediation status.
Develop automated workflows for identifying, prioritizing, and remediating vulnerabilities and configuration deficiencies.
Support implementation and validation of DISA STIGs, Security Technical Implementation requirements, RMF controls, and applicable DoD cybersecurity policies.
Work with cybersecurity, network, cloud, systems engineering, and operations teams to incorporate Zero Trust requirements into existing and emerging architectures.
Support security assessments, ATO/RMF activities, POA&M remediation, vulnerability management, and continuous monitoring.
Develop architecture diagrams, engineering documentation, implementation procedures, SOPs, configuration baselines, and operational runbooks.
Troubleshoot complex integration and interoperability issues across security, endpoint, cloud, network, and identity platforms.
Provide technical recommendations to government engineering and cybersecurity leadership regarding Zero Trust architecture, technology selection, implementation priorities, and risk.
Required Qualifications
Active
TS/SCI clearance.
7+ years of cybersecurity, systems engineering, cloud engineering, or enterprise infrastructure experience, with significant experience supporting DoD or Intelligence Community environments.
Demonstrated experience implementing or supporting
Zero Trust architectures and cybersecurity controls in complex enterprise environments.
Hands-on experience with several of the following, with strong expertise in at least two or three:
Tanium
Eclypsium
SteelCloud ConfigOS
Microsoft Defender
Microsoft Azure / Azure Government
Azure Bicep / Infrastructure as Code
Experience with endpoint security, vulnerability management, configuration management, continuous monitoring, and security compliance.
Working knowledge of DISA STIGs, RMF, NIST 800-53, DoD cybersecurity requirements, and vulnerability remediation processes.
Experience engineering solutions in classified and/or disconnected/restricted DoD environments.
Understanding of Windows Server, Windows endpoints, Active Directory/Entra ID, networking, virtualization, and enterprise infrastructure.
Ability to develop technical documentation and communicate complex cybersecurity concepts to both engineering teams and government leadership.
Ability to work independently in a mission environment while collaborating with government personnel, OEMs, integrators, and other engineering teams.

Zero Trust Engineer – Tanium / Eclypsium / SteelCloud / Microsoft Defender / Azure

Employer job description

Clearance:

Location:

Environment:

Key Responsibilities

Preferred Qualifications

About this listing