Senior IT Systems & Security Engineer (CedD226)

Role Description:

We are seeking a Senior Technical Implementation Engineer to join Commercial Cyber Operations. This person will lead hands-on technical work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will design, implement, and validate the systems that support those requirements.
Responsibilities:

The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise.

- Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead.

- Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments.

- Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune.

- Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls.

- Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access.

- Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues.

- Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks.

- Guide other implementation engineers and turn repeatable work into standards, scripts, and automation.

Minimum Experience and Qualifications:

- Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments.

- Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace.

- Broad mobile device management and unified endpoint management experience across multiple platforms, with strong practical experience using Jamf and Microsoft Intune.

- Experience managing Windows, macOS, iOS, and Android devices.

- Experience with networking, firewalls, VPNs, identity, logging, endpoint protection, vulnerability management, patching, and backup systems.

- Ability to lead customer implementations, make sound technical decisions independently, and explain those decisions in plain English.

- Ability to produce accurate technical documentation and work effectively in a remote, asynchronous environment.

- US citizenship with CUI access.

Preferred Experience and Qualifications:

- GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android

- Enterprise, Microsoft Defender, or Microsoft Purview experience.

- Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls.

- Cybersecurity Maturity Model Certification (CMMC) 2.0 experience.

- PowerShell, shell scripting, infrastructure as code, security monitoring, or workflow-automation experience.

- Relevant Microsoft, Google, Apple, cloud, networking, or security certifications.

Travel Expectations: 10%-25%

Full compensation packages are based on candidate experience. Compensation ranges are established using national benchmarking data and apply across all geographic locations within the United States.

Remote - USA

$148,750—$201,250 USD

Who We Are

Defense Unicorns delivers mission value by streamlining software delivery so our customers can focus on the most important challenges. We share a vision of freedom and security for the advancement of progress and innovation. Our commitment to this vision, and to our mission-driven customers, means a commitment to speed, user experience and optionality, without compromising security. Our team is composed of innovators, software engineers, and veterans with decades of exp