Junior Endpoint Engineer

# Junior Endpoint Engineer Hybrid   
• Bethesda, MD 20814## Overview Salary Range $70,000.00 - $85,000.00 Salary/year Position Type Full Time

Travel Percentage None## DescriptionTIAG is now hiring a
** Junior Endpoint Engineer
** to support a major cybersecurity modernization effort for the Uniformed Services University (USU). This role reports onsite in a Hybrid capacity at the customer location in Bethesda, MD. This position requires a Secret level clearance to be processed in order to begin work, so US or Naturalized Citizenship is a  this role the candidate will assist the Lead Security Architect and senior engineers in migrating approximately 3,000 heterogeneous endpoints (Windows, macOS, and Linux) from a legacy Trellix environment to Microsoft Defender for Endpoint (MDE).

Key Responsibilities
* Assist in executing high-velocity rollouts of the MDE agent to Windows, macOS, and Linux systems using Microsoft Endpoint Configuration Manager (MECM/SCCM) and automated deployment scripts.
* Monitor the Microsoft Defender portal during deployment waves to verify that endpoints are establishing active, error-free telemetry reporting. Track failed deployments and retry statuses.
* Assist in systematically uninstalling legacy Trellix agents across all supported operating systems once MDE telemetry is verified.
* Support the transition of disk encryption management from Trellix to native OS tools, specifically Bit Locker for Windows and File Vault for macOS.
* Help verify that all native encryption recovery keys are successfully escrowed and protected within Entra  prevent any loss of access.
* Support manual reviews and compliance checks to ensure applied DISA Security Technical Implementation Guides (STIGs) are correctly functioning at the agent level.
* Document device-specific blockers and agent conflicts that require further troubleshooting by senior engineers or Government IT staff.## Qualifications

Required Experience:

* Active DoD Secret clearance.
* 1–3 years of hands-on experience in IT support, systems administration, or endpoint management.
* Familiarity with enterprise deployment tools such as MECM/SCCM.
* Basic administrative knowledge across multiple operating systems, including Windows, macOS, and Linux.
* Understanding of disk encryption tools like Bit Locker and File Vault.
* DoD 8570.01-M Information Assurance Management (IAM) Level I or Information Assurance Technical (IAT) Level II certification (e.g., CompTIA Security+ CE).
* Microsoft 365 Certified:
Endpoint Administrator Associate (MD-102) or foundational Microsoft certifications (e.g., SC-900).
* CompTIA A+, Network+, or basic OS-specific certifications (Windows/macOS).