Full-Time
Master Endpoint Protection Administrator
PD Inc
No salary listed
No H1B Sponsorship
Montgomery, AL, USA
In Person
US Citizenship, US Top Secret Clearance Required
Bachelor's
Category
 Cybersecurity (1) |
|---|
Required Skills
Microsoft Office
Microsoft Azure
Data Visualization
Cybersecurity
AWS
Requirements
- A bachelor's degree or equivalent work experience.
- Seven or more years of relevant and recent experience with endpoint tools and cybersecurity.
- Five or more years of relevant and recent experience with Microsoft Office products.
- Experience with Microsoft Defender for Endpoint, Microsoft Defender for Endpoint for servers, Trellix, Trellix ePolicy Orchestrator servers, CMRS, and Axonius.
- Experience with host-based AWS and Azure security solutions, including Microsoft Entra ID Permissions Management, Azure Active Directory, Azure Key Vault, Microsoft Purview, network security groups, Azure DDoS Protection, Azure Policy, Microsoft Defender for Cloud, and Azure Sentinel.
- A current 8570/8140-required certification with a network-environment focus and ESS certifications.
- An active Secret clearance.
- U.S. citizenship.
Responsibilities
- Operate, manage, and deploy approved endpoint security tools and components, including ESS and Microsoft Defender/Microsoft Defender for Server, in accordance with active Department of Defense and Defense Information Systems Agency policies and procedures in isolated environments, SIPRNET, and NIPRNET.
- Monitor, maintain, and facilitate endpoint protection compliance throughout DISA and the system life cycle.
- Perform rogue-system and removable-storage monitoring and registration, testing, module installation, policy and tag creation and application, security-scan creation and application, firewall tuning and enforcement, Intrusion Protection System tuning and enforcement, and antivirus tuning and enforcement.
- Validate, register, update, and maintain approved mass-storage-device documentation, including removable spinning-disk drives.
- Participate in and adhere to change-control-board and stakeholder weekly meetings, determinations, and requirements.
- Investigate, remediate, prevent, and document issues resulting in denials of service.
- Create, maintain, and facilitate custom queries, reports, and dashboards for system, module, and policy compliance.
- Monitor and report cyber and insider threats.
- Facilitate and approve endpoint-protection application upgrades and changes.
- Coordinate Tier III vendor-support troubleshooting.
- Monitor, evaluate, remediate, and prevent performance-impacting issues.
- Manage Defense Information Systems Agency-approved endpoint-security-tool accounts and credentials in accordance with DISA privileged-access policies and procedures.
- Conduct audits and provide documentation.
- Produce compliance reports and trending analyses, current registered-device documentation, security-violation reports, and weekly metrics.