HBSS/MDE Administrator SME

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! 
JCS Solutions LLC is seeking a skilled HBSS/MDE Administrator Subject Matter Expert (SME) to join the I3TS team in Fort Belvoir, VA, supporting the Defense Threat Reduction Agency (DTRA). The I3TS program provides enterprise‑wide IT support that enables DTRA’s Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to internal and external mission partners operating in CONUS and OCONUS locations.
Job Summary:

The selected candidate will be responsible for ensuring the security and integrity of IT systems through endpoint security operations, with hands‑on experience using Trellix (HBSS) and Microsoft Defender for Endpoint (MDE). Responsibilities include applying Security Technical Implementation Guides (STIGs), managing system patching, overseeing vulnerability management, and supporting compliance with DoD and federal cybersecurity requirements.

This position operates in a classified computing environment and requires an individual who can work both independently and collaboratively with IT analysts, administrators, and engineers. The role demands excellent communication skills and the ability to adapt quickly in a high‑energy environment with shifting priorities.

Must possess an active DoD TS/SCI Clearance at time of consideration.

What you will do:

• Lead and execute the migration from Trellix to Microsoft Defender for Endpoint (MDE)
• Administer endpoint security solutions using Microsoft Defender, Trellix (HBSS), and Microsoft Intune
• Perform continuous monitoring, analysis, and response to system, network, and security events
• Identify vulnerabilities and non‑compliance with Information Assurance (IA) policies and regulations
• Recommend and implement mitigation strategies for identified risks
• Apply, validate, and document STIG configurations
• Conduct STIG compliance checks using SCAP Compliance Checker, SCC, and STIG Viewer
• Manage vulnerability remediation and system hardening activities
• Support internal and external security audits, inspections, and continuous monitoring
• Assist in identifying, responding to, and documenting security incidents
• Develop, implement, and enforce Information Security Policies and Procedures
• Collaborate with system administrators, engineers, and compliance teams to maintain secure operations
• Patching and System Updates
  • Manage and deploy operating system and application patches in accordance with federal policies
  • Coordinate patch schedules to minimize operational impact while meeting compliance requirements
  • Validate patch deployment success and troubleshoot patch‑related issues
• System Hardening and Compliance
  • Harden systems using DoD and NIST security best practices to reduce attack surfaces
  • Maintain configuration baselines and ensure adherence to DoD, RMF, and NIST standards

What you will bring:

• Bachelor’s degree (BS) with 12–15 years of experience, or 16+ years of Information Assurance (IA) experience in lieu of a degree
  • Specific experience, education, or training may substitute for degree requirements
• Current DoD 8570 baseline certification
• Strong understanding of:
  • Risk Management Framework (RMF)
  • NIST, ICD, and CNSS standards
• Experience with LAN/WAN technologies and cybersecurity best practices in a classified environment, including crypto and key management
• Proven expertise with STIG compliance, SCC, STIG Viewer, and ACAS
• Expert‑level experience with:
  • Microsoft Windows
  • Linux
  • System virtualization in a secure network environment
• Ability to work effectively in a constantly changing regulatory environment, managing short‑, mid‑, and long‑term remediation timelines
• Strong teamwork skills with the ability to adapt quickly to change
• Excellent written and verbal communication skills
• Active DoD TS/SCI Clearance required

How you will wow us:

• Security+, CISSP, or equivalent certification
• DoD Information Systems (IS) knowledge and experience
• Experience with security hardening scripting and automation
• Hands‑on experience with Ansible and/or Microsoft Endpoint Configuration Manager (MECM)
• Microsoft OS certifications (e.g., MCSE Windows or equivalent)
• Linux certifications, such as:
  • RHCSA
  • CompTIA Linux+
  • LFCS / LFCE
  • Or equivalent

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.  JCS is both a Great Place to Work and a Washington Post’s Top Places to Work certified company.
 
Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

Commitment to non-discrimination: All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local laws.