Zero Trust Engineer – Tanium​/Eclypsium​/SteelCloud​/Microsoft Defender​/Azure

Clearance: Active TS/SCI

Location: Customer/DoD facility; on-site/hybrid as mission requirements permit

Environment: U.S. Navy / Department of War classified and mission-critical networks

G2IT is seeking an experienced Zero Trust Engineer to design, implement, integrate, and sustain Zero Trust capabilities across classified and unclassified Navy and DoW enterprise environments. The engineer will support the modernization and hardening of complex IT environments by integrating endpoint visibility, vulnerability and firmware security, configuration compliance, threat protection, identity, and cloud security capabilities.

The ideal candidate has hands‑on experience with Tanium, Eclypsium, Steel Cloud ConfigOS, Microsoft Defender, Microsoft Azure, and Azure Bicep
, and understands how these technologies contribute to an integrated Zero Trust architecture rather than operating as independent security tools.

• Engineer, deploy, configure, integrate, and sustain Zero Trust security capabilities across Navy and DoW enterprise environments.
• Implement Zero Trust principles consistent with DoD Zero Trust Strategy and Zero Trust Capability Execution Roadmap, including continuous verification, least‑privilege access, endpoint/device trust, visibility, automation, and policy enforcement.
• Deploy and administer Tanium capabilities supporting endpoint visibility, asset discovery, vulnerability management, configuration management, compliance, and remediation.
• Implement and support Eclypsium for firmware, hardware, supply‑chain, and device‑level security visibility and risk identification.
• Engineer and administer Steel Cloud ConfigOS to automate STIG compliance, security configuration, remediation, and continuous compliance activities.
• Configure and integrate Microsoft Defender capabilities for endpoint protection, threat detection, vulnerability management, investigation, and response.
• Design and support secure Microsoft Azure environments, including implementation of security controls, policies, identity, networking, monitoring, and logging.
• Develop and maintain Azure Bicep Infrastructure-as-Code (IaC) templates to provide repeatable, controlled, and auditable deployment of Azure infrastructure and security configurations.
• Integrate security platforms and telemetry to establish a consolidated view of device posture, vulnerability, configuration compliance, threats, and remediation status.
• Develop automated workflows for identifying, prioritizing, and remediating vulnerabilities and configuration deficiencies.
• Support implementation and validation of DISA STIGs, Security Technical Implementation requirements, RMF controls, and applicable DoD cybersecurity policies.
• Work with cybersecurity, network, cloud, systems engineering, and operations teams to incorporate Zero Trust requirements into existing and emerging architectures.
• Support security assessments, ATO/RMF activities, POA&M remediation, vulnerability management, and continuous monitoring.
• Develop architecture diagrams, engineering documentation, implementation procedures, SOPs, configuration baselines, and operational runbooks.
• Troubleshoot complex integration and interoperability issues across security, endpoint, cloud, network, and identity platforms.
• Provide technical recommendations to government engineering and cybersecurity leadership regarding Zero Trust architecture, technology selection, implementation priorities, and risk.

• Active TS/SCI clearance.
• 7+ years of cybersecurity, systems engineering, cloud engineering, or enterprise infrastructure experience, with significant experience supporting DoD or Intelligence Community environments.
• Demonstrated experience implementing or supporting Zero…