Apply on Employer Site

DecisionPoint Corporation · 4 months ago

Zero Trust Security Engineer - SME

Washington, DC

Full-time

Onsite

Senior Level, Lead/Staff

10+ years exp

DecisionPoint Corporation is seeking a Zero Trust Security Engineer - SME to serve as the subject matter expert for Zero Trust Architecture (ZTA) implementation across GPO enterprise systems. This role involves leading Defender for Endpoint deployment, driving continuous cybersecurity improvements, and ensuring compliance with various federal frameworks.

ConsultingInformation ServicesInformation Technology

Comp. & Benefits

No H1B

Security Clearance Required

Responsibilities

Oversee technical planning, scripting, testing, and enterprise-wide deployment of Microsoft Defender for Endpoint agents

Coordinate onboarding of target endpoints using Microsoft Intune or Active Directory Group Policy

Ensure proper telemetry reporting, endpoint visibility, and adherence to Microsoft security best practices. Create and maintain security control test results, asset inventories, and remediation documentation in GRC repositories

Contribute to RMF artifact generation such as POA&Ms, data flow diagrams, and patch/upgrade schedules

Ensure all documentation reflects the latest changes to production environments and security tools

Lead architectural reviews and risk posture assessments to identify cybersecurity gaps and recommend remediation strategies

Evaluate logging efficiency, rule tuning, and threat detection performance across SIEM and endpoint platforms

Conduct quarterly executive reviews and operational touchpoints to align security posture with mission goals

Contribute to the development and maintenance of RMF documentation (POA&Ms, Security Assessment Reports, Security Plans)

Validate and document security controls for systems affected by Defender and other ZTA tooling

Ensure compliance with NIST SP 800-53, 800-37, and FISMA standards across security solutions

Qualification

Zero Trust ArchitectureMicrosoft DefenderNIST complianceMicrosoft IntuneCybersecurity engineeringCISSP certificationSoft skills

Required

10 years of experience in cybersecurity engineering, with 3+ years in Zero Trust or endpoint security domains

Bachelor's degree in Computer Science, Information Systems, other related disciplines (or equivalent experience)

Demonstrated expertise with Microsoft Defender suite, Intune, and Azure-based security solutions

Proven ability to lead enterprise-wide cybersecurity solution design, deployment, and validation

Must be able to obtain and maintain a Public Trust clearance

Certifications Microsoft Certified Security Operations Analyst Associate (SC-200), Microsoft Certified Cybersecurity Architect Expert (SC-100), or CISSP (Certified Information Systems Security Professional) required

Preferred

Federal experience

Company

DecisionPoint Corporation

DecisionPoint Corporation, a Service Disabled Veteran Owned Small Business (SDVOSB), is an innovation thought leader in the Defense and Federal communities.

Founded in 2011

Gaithersburg, Maryland, USA

51-200 employees