Zero Trust Engineer – Tanium / Eclypsium / SteelCloud / Microsoft Defender / Azure
Clearance: Active TS/SCI
Location: Customer/DoD facility; on-site/hybrid as mission requirements permit
Environment: U.S. Navy / Department of War classified and mission-critical networks
Position Overview
G2IT is seeking an experienced Zero Trust Engineer to design, implement, integrate, and sustain Zero Trust capabilities across classified and unclassified Navy and DoW enterprise environments. The engineer will support the modernization and hardening of complex IT environments by integrating endpoint visibility, vulnerability and firmware security, configuration compliance, threat protection, identity, and cloud security capabilities.
The ideal candidate has hands-on experience with Tanium, Eclypsium, SteelCloud ConfigOS, Microsoft Defender, Microsoft Azure, and Azure Bicep, and understands how these technologies contribute to an integrated Zero Trust architecture rather than operating as independent security tools.
Key Responsibilities
- Engineer, deploy, configure, integrate, and sustain Zero Trust security capabilities across Navy and DoW enterprise environments.
- Implement Zero Trust principles consistent with DoD Zero Trust Strategy and Zero Trust Capability Execution Roadmap, including continuous verification, least-privilege access, endpoint/device trust, visibility, automation, and policy enforcement.
- Deploy and administer Tanium capabilities supporting endpoint visibility, asset discovery, vulnerability management, configuration management, compliance, and remediation.
- Implement and support Eclypsium for firmware, hardware, supply-chain, and device-level security visibility and risk identification.
- Engineer and administer SteelCloud ConfigOS to automate STIG compliance, security configuration, remediation, and continuous compliance activities.
- Configure and integrate Microsoft Defender capabilities for endpoint protection, threat detection, vulnerability management, investigation, and response.
- Design and support secure Microsoft Azure environments, including implementation of security controls, policies, identity, networking, monitoring, and logging.
- Develop and maintain Azure Bicep Infrastructure-as-Code (IaC) templates to provide repeatable, controlled, and auditable deployment of Azure infrastructure and security configurations.
- Integrate security platforms and telemetry to establish a consolidated view of device posture, vulnerability, configuration compliance, threats, and remediation status.
- Develop automated workflows for identifying, prioritizing, and remediating vulnerabilities and configuration deficiencies.
- Support implementation and validation of DISA STIGs, Security Technical Implementation requirements, RMF controls, and applicable DoD cybersecurity policies.
- Work with cybersecurity, network, cloud, systems engineering, and operations teams to incorporate Zero Trust requirements into existing and emerging architectures.
- Support security assessments, ATO/RMF activities, POA&M remediation, vulnerability management, and continuous monitoring.
- Develop architecture diagrams, engineering documentation, implementation procedures, SOPs, configuration baselines, and operational runbooks.
- Troubleshoot complex integration and interoperability issues across security, endpoint, cloud, network, and identity platforms.
- Provide technical recommendations to government engineering and cybersecurity leadership regarding Zero Trust architecture, technology selection, implementation priorities, and risk.
Required Qualifications
- Active TS/SCI clearance.
- 7+ years of cybersecurity, systems engineering, cloud engineering, or enterprise infrastructure experience, with significant experience supporting DoD or Intelligence Community environments.
- Demonstrated experience implementing or supporting Zero Trust architectures and cybersecurity controls in complex enterprise environments.
- Hands-on experience with several of the following, with strong expertise in at least two or three:
- Tanium
- Eclypsium
- SteelCloud ConfigOS
- Microsoft Defender
- Microsoft Azure / Azure Government
- Azure Bicep / Infrastructure as Code
- Experience with endpoint security, vulnerability management, configuration management, continuous monitoring, and security compliance.
- Working knowledge of DISA STIGs, RMF, NIST 800-53, DoD cybersecurity requirements, and vulnerability remediation processes.
- Experience engineering solutions in classified and/or disconnected/restricted DoD environments.
- Understanding of Windows Server, Windows endpoints, Active Directory/Entra ID, networking, virtualization, and enterprise infrastructure.
- Ability to develop technical documentation and communicate complex cybersecurity concepts to both engineering teams and government leadership.
- Ability to work independently in a mission environment while collaborating with government personnel, OEMs, integrators, and other engineering teams.
Preferred Qualifications
Experience with Azure Government, IL5/IL6 environments, Microsoft Sentinel, Defender XDR, Defender for Cloud, Entra ID, PowerShell, Git/Azure DevOps, Terraform, REST APIs, SIEM/SOAR platforms, ACAS/Tenable, Splunk, ServiceNow, and automated STIG/compliance workflows is highly desirable.
Relevant certifications may include Security+, CISSP, CASP+/SecurityX, Microsoft Azure Security Engineer, Azure Administrator, Azure Solutions Architect, Tanium certifications, or comparable DoD 8140-aligned credentials.
Salary range: $130K-$150K, depending on experience
