Senior Systems Engineer – Endpoint Security

Job Title:

Senior Systems Engineer – Endpoint Security

Job Category:
Information Technology

Time Type:
Full time

Minimum Clearance Required to Start: TS/SCI with Polygraph

Employee Type:
Regular

Percentage of

Travel Required:

None

CACI is seeking a Senior Systems Engineer that will serve as a principal technical leader and subject matter expert for the National Security Agency’s Enterprise Endpoint Detection and Response (EDR) Program. Working within a highly classified, multi-domain environment, you will shape the strategic architecture, integration, deployment, and optimization of world‑class endpoint security platforms including Microsoft Defender for Endpoint (MDE) and Trellix HX.

This is a chance to directly strengthen national security by engineering resilient endpoint defense capabilities that provide full enterprise visibility, rapid threat containment, and robust configuration management.

• Lead the full lifecycle engineering and scale‑out architecture of MDE and Trellix HX across hybrid environments, including on‑premises, cloud, and virtual desktop infrastructures (VDI).
• Develop advanced system engineering documentation, deployment strategies, and implementation plans.
• Optimize agent configurations, exclusion policies, and system performance to ensure mission success and minimize friction across high‑demand environments.
• Monitor and maintain enterprise endpoint health at scale.
• Work directly with threat hunters and intelligence analysts to convert actionable intelligence into custom technical indicators of compromise (IOCs) using KQL and YARA.
• Serve as a primary technical advisor to Government stakeholders regarding system risks, design decisions, and engineering recommendations.
• Provide advanced forensic and technical support to the SOC during high‑priority incidents.
• Mentor junior and mid‑level engineers, fostering growth, collaboration, and technical excellence.

• 20+ years of experience as a Systems Engineer on programs of similar scope, type, and complexity.
• Proven experience planning and leading Systems Engineering efforts.
• Bachelor’s degree in Systems Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or a related field from an accredited institution.
• Five (5) additional years of Systems Engineering experience may be substituted for a bachelor’s degree.
• Microsoft Defender for Endpoint Expertise:
  Hands‑on engineering experience with MDE architecture, deployment via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
• Trellix HX Expertise:
  Proven ability to engineer, deploy, and manage Trellix HX controllers and agents within air‑gapped or highly restricted networks, including creating OpenIOC and YARA rules.
• Operating System & Forensic Knowledge:
  Deep understanding of Windows, Linux, and macOS internals, including file systems, registries, and process execution behavior.
• Professional
  
  Certifications:
  
  Compliance with DoD 8570/8140 IAM Level II or III baseline requirements.

• Vendor
  
  Certifications:
  
  Microsoft Security Operations Analyst (SC‑200), Azure Security Engineer (AZ‑500), and/or Trellix engineering certifications.
• Methodologies & Tools:
  Experience with Model‑Based Systems Engineering (MBSE), Cameo, and Atlassian suite tools such as Jira and Confluence.
• Technical Frameworks:
  Familiarity with NSA Technical Manual standards (e.g., NSA DS‑89) and defense‑in‑depth engineering principles.
• Core Competencies:
  
  Demonstrated collaboration skills, transparency in managing high‑consequence systems, and a passion for developing and mentoring technical talent.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high‑performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

We value the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to…