The Senior Systems Engineer (Level 3) serves as a principal technical leader and subject matter expert within the Agency’s Enterprise Endpoint Detection and Response (EDR) Program. Operating in a highly classified, multi-domain infrastructure, the successful candidate will drive the strategic architectural design, end-to-end integration, deployment, and optimization of premier endpoint security platforms, specifically Microsoft Defender for Endpoint (MDE) and Trellix HX. This critical role bridges high-level systems architecture with operational defense capabilities, ensuring total endpoint visibility, robust threat containment, and resilient configuration management across all enterprise and mission-critical assets to defend national security infrastructure against sophisticated cyber threats.
The Systems Engineer 3 is responsible for leading the lifecycle engineering and scale-out architecture of MDE and Trellix HX across hybrid environments, including on-premises, cloud, and virtual desktop infrastructures (VDI). This includes authoring complex system engineering and implementation plans, tuning agent configurations and exclusion policies to eliminate mission friction, and monitoring overall endpoint health at scale. The engineer will collaborate closely with threat hunting and intelligence analysts to translate actionable threat intelligence into custom technical indicators of compromise (IOCs), utilizing Kusto Query Language (KQL) and YARA rules. Additionally, the individual will act as a primary technical advisor to Government stakeholders on system risks and engineering considerations, provide advanced forensic support to the SOC during critical high-priority incidents, and actively mentor junior and mid-level engineering personnel within the program.
Required Qualifications
- TS/SCI with agency appropriate poly
- Twenty (20) years experience as a SE in programs and contracts of similar scope, type and complexity is required.
- Demonstrated experience in planning and leading Systems Engineering efforts is
required. - Bachelor’s degree in System Engineering, Computer Science, Information Systems,
Engineering Science, Engineering Management, or related discipline from an accredited college or university is required. - Five (5) years of additional SE experience may be substituted for a bachelor’s degree.
Required Technical Skills
- Microsoft Defender for Endpoint (MDE) Expertise: Proven engineering experience with MDE architecture, deployment strategies via MECM/SCCM or Intune, policy ring management, and advanced hunting using Kusto Query Language (KQL).
- Trellix HX Expertise: Demonstrated experience engineering, deploying, and managing Trellix HX (formerly FireEye) controllers and agents within air-gapped or highly restricted networks, including the creation of OpenIOC and YARA rules.
- Operating System & Forensic Knowledge: In-depth technical understanding of Windows, Linux, and macOS internals, including file systems, registry structures, and process execution mechanics.
- Professional Standards: Compliance with DoD 8570/8140 IAM Level II or III baseline certifications.
Desired Technical Skills
- Vendor Certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), Azure Security Engineer Associate (AZ-500), or Trellix Certified Engineering credentials.
- Methodologies & Toolsets: Experience with Model-Based Systems Engineering (MBSE), Cameo, and workflow management within the Atlassian Suite (Jira, Confluence).
- Technical Frameworks: Familiarity with Agency Technical Manual Standards (e.g., Agency DS-89) and defense-in-depth engineering principles.
- Core Competencies: Strong record of team collaboration, exceptional transparency in managing high-consequence infrastructure, and an aptitude for developing technical leadership pipelines.
The Benefits Package
- Wyetech believes in generously supporting employees as they prepare for retirement. The company automatically contributes 20% of each employee's gross compensation to a Simplified Employee Pension (SEP) IRA, with no requirement for employee matching. All contributions are fully vested from day one, ensuring immediate ownership of retirement funds.
- Wyetech provides a generous PTO plan of up to 200 hours annually, aligned with applicable state leave regulations. Employees have the flexibility to adjust their PTO allocation at the start of each calendar year, ensuring it meets their evolving needs.
- A Choice of Medical Plan Options, some with Health Savings Account (HSA)
- Vision and Dental
- Life and AD&D Benefits
- Short and Long-Term Disability
- Hospital Indemnity, Accident, and Critical Illness Insurances
- Optional Identity Theft and Legal Protection Services
Company Environment & Perks
- Employee Referral Bonus Eligibility up to $10,000
- Mobility Among Wyetech-supported Contracts
- Various contract and work locations throughout Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii and OCONUS
- Various team-building events throughout the year such as: monthly lunches, summer company picnic, and an annual holiday party. Employees receive two complementary branded clothing orders annually.
Skills Required
- Active TS/SCI security clearance with agency-appropriate polygraph
- Twenty (20) years experience as a Systems Engineer on similar scope programs and contracts
- Demonstrated experience planning and leading Systems Engineering efforts
- Bachelor's degree in Systems Engineering, Computer Science, Information Systems, Engineering Science, Engineering Management, or related (or +5 years SE experience substitution)
- DoD 8570/8140 IAM Level II or III baseline certification
- Proven engineering experience with Microsoft Defender for Endpoint (MDE), including deployment via MECM/SCCM or Intune, policy ring management, and advanced hunting
- Demonstrated engineering, deployment, and management experience with Trellix HX (FireEye), including controller/agent deployments in air-gapped or restricted networks
- Proficiency with Kusto Query Language (KQL) for advanced hunting and analytics
- Experience creating YARA rules and OpenIOC indicators of compromise
- In-depth knowledge of Windows, Linux, and macOS internals and forensic analysis
- Experience providing advanced forensic support to SOC during high-priority incidents
- Experience deploying and managing endpoint security in hybrid on-prem, cloud, and VDI environments
- Microsoft Certified: Security Operations Analyst (SC-200), Azure Security Engineer (AZ-500), or Trellix Certified Engineering credentials
- Experience with Model-Based Systems Engineering (MBSE) and Cameo
- Experience using Atlassian Suite tools (Jira, Confluence)
- Familiarity with Agency Technical Manual Standards (e.g., Agency DS-89) and defense-in-depth principles
What We Do
Wyetech offers quality engineering services in the fields of Software Engineering, Systems Engineering, Cloud Engineering, Data Analysis, and Cyber Security to federal and commercial customers. Wyetech has qualified employees in a broad spectrum of engineering disciplines; however, it is our quality that sets us apart from the rest. Candidates are internal referrals and are thoroughly scrutinized. The result of this has been tremendous, our customers recognize the level of quality and professionalism that Wyetech staff offer. Wyetech is always seeking new quality engineering talent. Please refer to our website for inquries and applications.
