Top Secret or Public Trust security clearance required.
The objectives of this effort are:
Establish and maintain secure, standardized workstation images for macOS and Windows that support both on-site and remote access, including VDI connectivity.
Implement and maintain endpoint configuration baselines, patching, and version control using approved enterprise tools to reduce configuration drift and security risk.
Strengthen device registration, enrollment, and asset inventory accuracy to ensure visibility into users, devices, and access across the environment.
Enhance logging, telemetry, and monitoring capabilities to support detection, investigation, and response to suspicious or unauthorized activity on endpoints and networks.
Reduce the likelihood and impact of lateral movement and credential misuse through hardened configurations, secure authentication mechanisms, and consistent enforcement of baseline controls.
The Consultant shall provide engineering support by designing and maintaining technical controls, implementing approved configurations, and producing documentation and operational playbooks necessary to support IRM&TS operations, Service Desk engineering escalations, and the incident response function.
Knowledge Transfer, Documentation, and Runbooks
The Engineer shall make solutions operationally sustainable by the Service Desk and IRM teams. Responsibilities:
Produce user-facing runbooks for imaging/recovery, patch-validation steps, enrollment troubleshooting, and common remediation tasks that the Service Desk can safely execute.
Conduct periodic training and working sessions with Service Desk leads, IAM, and SOC staff to review new baselines, automation, and outage recovery steps.
Maintain a living knowledge-base with versioned documentation and clear escalation paths for image/patch/enrollment failures.
Exclusions and Boundaries
The Engineer shall not provide routine Tier 1 help desk ticket handling or general end- user desktop support unrelated to imaging, baseline remediation, enrollment, patching, or telemetry engineering.
The Engineer shall not be the final authority for security policy decisions; technical implementations will be coordinated with and approved by the COR, Cybersecurity leadership, and the CO as required.
Engineering Tooling and Software Procurement Support
The Consultant may identify the need for software, licenses, tools, or subscriptions required to perform the engineering tasks defined in this Description of Work (e.g., imaging tools, automation modules, logging agents, or endpoint management extensions).
The Consultant shall not independently procure items or spend government funds without prior written CO approval.
The Consultant may submit written recommendations and justifications to the COR identifying required tools, licensing models, estimated costs, and implementation impact.
Upon approval, the Consultant may assist with implementation, configuration, and validation of approved tools.
Preferred Education:
Bachelor's degree in Information Technology, Cybersecurity, or a related field (or equivalent experience).
Education Substitution:
Formal education requirements may be waived based on relevant professional experience.
Required Credentials
The consultant(s) provided by the Consultant must have the following current credentials:
Top Secret (TS) security clearance
Never miss an opportunity! Create an alert based on the job you applied for.
