HBSS/MDE Administrator SME

The selected candidate will be responsible for ensuring the security and integrity of IT systems through endpoint security operations, with hands‑on experience using Trellix (HBSS) and Microsoft Defender for Endpoint (MDE). Responsibilities include applying Security Technical Implementation Guides (STIGs), managing system patching, overseeing vulnerability management, and supporting compliance with DoD and federal cybersecurity requirements.

This position operates in a classified computing environment and requires an individual who can work both independently and collaboratively with IT analysts, administrators, and engineers. The role demands excellent communication skills and the ability to adapt quickly in a high‑energy environment with shifting priorities.

Must possess an active DoD TS/SCI Clearance at time of consideration.

• Lead and execute the migration from Trellix to Microsoft Defender for Endpoint (MDE)
• Administer endpoint security solutions using Microsoft Defender, Trellix (HBSS), and Microsoft Intune
• Perform continuous monitoring, analysis, and response to system, network, and security events
• Identify vulnerabilities and non‑compliance with Information Assurance (IA) policies and regulations
• Recommend and implement mitigation strategies for identified risks
• Apply, validate, and document STIG configurations
• Conduct STIG compliance checks using SCAP Compliance Checker, SCC, and STIG Viewer
• Manage vulnerability remediation and system hardening activities
• Support internal and external security audits, inspections, and continuous monitoring
• Assist in identifying, responding to, and documenting security incidents
• Develop, implement, and enforce Information Security Policies and Procedures
• Collaborate with system administrators, engineers, and compliance teams to maintain secure operations
• Patching and System Updates
  • Manage and deploy operating system and application patches in accordance with federal policies
  • Coordinate patch schedules to minimize operational impact while meeting compliance requirements
  • Validate patch deployment success and troubleshoot patch‑related issues
• System Hardening and Compliance
  • Harden systems using DoD and NIST security best practices to reduce attack surfaces
  • Maintain configuration baselines and ensure adherence to DoD, RMF, and NIST standards

• Bachelor’s degree (BS) with 12–15 years of experience, or 16+ years of Information Assurance (IA) experience in lieu of a degree
  • Specific experience, education, or training may substitute for degree requirements
• Current DoD 8570 baseline certification
• Strong understanding of:
  • Risk Management Framework (RMF)
  • NIST, ICD, and CNSS standards
• Experience with LAN/WAN technologies and cybersecurity best practices in a classified environment, including crypto and key management
• Proven expertise with STIG compliance, SCC, STIG Viewer, and ACAS
• Expert‑level experience with:
  • Microsoft Windows
  • Linux
  • System virtualization in a secure network environment
• Ability to work effectively in a constantly changing regulatory environment, managing short‑, mid‑, and long‑term remediation timelines
• Strong teamwork skills with the ability to adapt quickly to change
• Excellent written and verbal communication skills
• Active DoD TS/SCI Clearance required

• Security+, CISSP, or equivalent certification
• DoD Information Systems (IS) knowledge and experience
• Experience with security hardening scripting and automation
• Hands‑on experience with Ansible and/or Microsoft Endpoint Configuration Manager (MECM)
• Microsoft OS certifications (e.g., MCSE Windows or equivalent)
• Linux certifications, such as:
  • RHCSA
  • CompTIA Linux+
  • LFCS / LFCE
  • Or equivalent

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.