Endpoint Security​/ESS Engineer; Journeyman

DecisionPoint seeks a Journeyman Endpoint Security / ESS Engineer to support endpoint-security administration, policy enforcement, agent health, compliance reporting, and security-event investigation for the USMEPCOM ENLIST program.

The Endpoint Security / ESS Engineer will serve as a McAfee endpoint-security specialist supporting the Department of Defense Endpoint Security Solutions environment. The engineer will investigate security events, unhealthy agents, policy failures, and endpoint-compliance issues; implement approved corrective actions; and validate that required endpoint protections remain operational and effective.

This role will coordinate agent deployment and endpoint remediation activities with Task 4 infrastructure personnel, support cybersecurity incident reporting, and maintain technical evidence for security-control and authorization activities.

This position is remote, with a preference for candidates located in the Chicago area.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

The Endpoint Security / ESS Engineer will:

• Serve as a technical specialist for the McAfee/Trellix endpoint-security technologies supporting the DoD Endpoint Security Solutions environment.

• Support administration, configuration, maintenance, and monitoring of approved endpoint-security tools and services.

• Implement and maintain approved endpoint-security policies, configurations, exclusions, rules, and enforcement settings.

• Monitor endpoint agents for connectivity, communication, deployment, update, and operational-health issues.

• Investigate unhealthy, inactive, noncommunicating, outdated, or improperly configured endpoint agents.

• Diagnose policy-enforcement failures, update failures, deployment errors, and endpoint-protection gaps.

• Implement Government-approved corrective actions and validate that endpoint protections have been successfully restored.

• Review ESS reports and dashboards to identify security events, compliance issues, policy failures, and remediation needs.

• Investigate endpoint-security alerts and events and coordinate response activities with cybersecurity, infrastructure, application, and Government teams.

• Coordinate McAfee/Trellix agent deployment, upgrade, repair, removal, and replacement activities with Task 4 infrastructure personnel.

• Support endpoint-remediation activities involving operating-system configurations, security policies, agents, signatures, content updates, and approved software.

• Confirm that endpoints receive required policies, signatures, content, and product updates.

• Validate endpoint compliance following remediation, configuration changes, maintenance, or agent deployment.

• Track endpoint-security findings, assigned owners, corrective actions, dependencies, deadlines, and closure evidence.

• Support vulnerability remediation associated with endpoint-security configurations, agent health, or protection status.

• Collect and maintain logs, screenshots, reports, configuration information, and other evidence supporting remediation and compliance.

• Create and update incident, problem, change, and remediation tickets in the designated workflow platform.

• Support cybersecurity incident reporting by gathering relevant endpoint data, event details, logs, timelines, and investigative evidence.

• Escalate significant events, persistent policy failures, widespread agent-health issues, and unresolved compliance deficiencies.

• Coordinate with system administrators and asset-management personnel to reconcile endpoint records, agent status, and authoritative inventories.

• Support security-control testing and provide endpoint-security evidence for RMF, ATO, ATC, audit, and…