Senior IT Systems & Security Engineer (CedD226) at Defense Unicorns

Job description

Role Description: We are seeking a Senior Technical Implementation Engineer to join Commercial Cyber Operations. This person will lead hands-on technical work across varied customer environments. Compliance Leads will own NIST SP 800-171 interpretation and assessment readiness; this engineer will design, implement, and validate the systems that support those requirements. Responsibilities: The listed responsibilities are not exhaustive and additional responsibilities may be assigned based on the evolving needs of the organization. We are seeking a dynamic individual who is able to adapt and take on new responsibilities as they arise. Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead. Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments. Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune. Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls. Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access. Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues. Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks. Guide other implementation engineers and turn repeatable work into standards, scripts, and automation. Minimum Experience and Qualifications: Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments. Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace. Broad mobile device management and unified endpoint management experience across multiple platforms, with strong practical experience using Jamf and Microsoft Intune. Experience managing Windows, macOS, iOS, and Android devices. Experience with networking, firewalls, VPNs, identity, logging, endpoint protection, vulnerability management, patching, and backup systems. Ability to lead customer implementations, make sound technical decisions independently, and explain those decisions in plain English. Ability to produce accurate technical documentation and work effectively in a remote, asynchronous environment. US citizenship with CUI access. Preferred Experience and Qualifications: GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android Enterprise, Microsoft Defender, or Microsoft Purview experience. Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls. Cybersecurity Maturity Model Certification (CMMC) 2.0 experience. PowerShell, shell scripting, infrastructure as code, security monitoring, or workflow-automation experience. Relevant Microsoft, Google, Apple, cloud, networking, or security certifications. Travel Expectations: 10%-25% Full compensation packages are based on candidate experience. Compensation ranges are established using national benchmarking data and apply across all geographic locations within the United States. Remote - USA $148,750 — $201,250 USD Who We Are Defense Unicorns delivers mission value by streamlining software delivery so our customers can focus on the most important challenges. We share a vision of freedom and security for the advancement of progress and innovation. Our commitment to this vision, and to our mission-driven customers, means a commitment to speed, user experience and optionality, without compromising security. Our team is composed of innovators, software engineers, and veterans with decades of experience delivering technology programs across the federal market. What We Do We create and deliver secure solutions for continuous software integration and delivery. Defense Unicorns consolidates the best practices for security pipelines, testing, and deployment automation in order to meet the high security requirements valued by mission owners. Our solutions are agnostic by design and we believe that growing a robust ecosystem of secure, cloud-native software solutions can help enterprise customers inside and outside the federal market buy and integrate software more easily. Who We Serve Defense Unicorns’ customers are mission-focused leaders across public and private enterprises. We proudly support defense and civil agencies across the U.S. government and we work closely with the creators of leading-edge software solutions to deliver value to the mission-owner by improving the security and consumability of commercial software products. What We Work On Kubernetes Cloud Environments (AWS/GCP and Azure) Infrastructure-as-code (like Terraform/Pulumi) Continuous Delivery and automation tooling GitOps Containers CNCF projects and open source products and packages Helm/Kustomize-Value Stream Mapping Building and improving security delivery Building Kubernetes and cloud native applications Benefits Our Unicorns Enjoy Health: Medical/Dental/Vision Premiums are 100% Company Paid Health Savings Account Life Insurance Disability Insurance Financial: 401k Retirement Plan Company Stock Options Home Office Budget Leave: We offer all full-time Unicorns Flexible Time Off (FTO) plus all Federal Holidays, one week for Thanksgiving, and two weeks for Christmas and New Year’s Paid Parental Leave Learning: Reimbursement for approved trainings/subscriptions Conferences (travel, lodging, and fees) Don’t have all the preferred experience or qualifications? Studies show that underrepresented groups like women and people of color are less likely to apply to jobs if they don't meet every requirement listed. At Defense Unicorns, we're committed to diversity. If you're enthusiastic about the role but don't match every criteria, we encourage you to apply. You could be the perfect fit for this or another role! Defense Unicorns is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, disability, sex, sexual orientation, gender identity or expression, age, national origin, veteran status, genetic information, union status and/or beliefs, or any other characteristic protected by federal, state, or local law. CCPA DISCLOSURE

Requirements

Must-haves

Assess unfamiliar customer environments and lead technical implementation plans with the Compliance Lead.
Configure and secure Microsoft 365, GCC High, Azure, Entra ID, Active Directory, Google Workspace, Google Cloud Identity, and hybrid environments.
Design, migrate, and operate endpoint-management programs across multiple mobile device management and unified endpoint management platforms, including Jamf and Microsoft Intune.
Implement identity, multifactor authentication, least privilege, endpoint security, logging, vulnerability management, patching, backup, and recovery controls.
Configure and troubleshoot Windows, macOS, iOS, Android, networks, firewalls, VPNs, segmentation, DNS, and secure remote access.
Work directly with customer IT teams, service providers, and vendors to resolve complex technical issues.
Validate completed work and produce clear configuration records, diagrams, evidence, and runbooks.
Guide other implementation engineers and turn repeatable work into standards, scripts, and automation.
Senior-level experience designing, administering, securing, and troubleshooting varied business IT environments.
Strong hands-on experience with both Microsoft and Google environments, including Microsoft 365, Entra ID, Active Directory, and Google Workspace.
Broad mobile device management and unified endpoint management experience across multiple platforms, with strong practical experience using Jamf and Microsoft Intune.
Experience managing Windows, macOS, iOS, and Android devices.
Experience with networking, firewalls, VPNs, identity, logging, endpoint protection, vulnerability management, patching, and backup systems.
Ability to lead customer implementations, make sound technical decisions independently, and explain those decisions in plain English.
Ability to produce accurate technical documentation and work effectively in a remote, asynchronous environment.
US citizenship with CUI access.
GCC High, Azure, Google Cloud Identity, Apple Business Manager, Android
Enterprise, Microsoft Defender, or Microsoft Purview experience.
Defense contractor or government experience, particularly with NIST SP 800-171 or NIST SP 800-53 controls.
Cybersecurity Maturity Model Certification (CMMC) 2.0 experience.
PowerShell, shell scripting, infrastructure as code, security monitoring, or workflow-automation experience.
Relevant Microsoft, Google, Apple, cloud, networking, or security certifications.
Who We Serve

Nice-to-haves

Don’t have all the preferred experience or qualifications? Studies show that underrepresented groups like women and people of color are less likely to apply to jobs if they don't meet every requirement listed.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

azurekubernetesawsgcp

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401k

Parental Leave