Zero Trust Security Engineer - SME

Zero Trust Security Engineer

The Government Publishing Office (GPO) SecDevOps program provides advanced security, development, and operations support to safeguard federal information systems and infrastructure. This initiative integrates cybersecurity best practices with agile development and IT operations to ensure continuous security, compliance, and resilience across GPO's enterprise IT services. The mission is to protect and enable GPO's digital transformation by delivering secure, scalable, and reliable IT services in alignment with federal cybersecurity mandates and operational excellence standards.

DecisionPoint Corporation is seeking a Zero Trust Security Engineer SME to serve as the subject matter expert for Zero Trust Architecture (ZTA) implementation across GPO enterprise systems. This role leads Defender for Endpoint deployment and configuration efforts, drives continuous enterprise cybersecurity improvements, and ensures alignment with NIST, RMF, and FISMA frameworks. As a key advisor to the IT Security Division, this individual will oversee enterprise risk posture, technical validation, and optimization of cybersecurity operations.

Location : Remote candidates located in the Washington, DC metropolitan area (DMV) are highly preferred.

Clearance Requirement : Must be able to obtain and maintain a Public Trust clearance.

Note : By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Duties & Responsibilities

Zero Trust Security Engineer SME will :

• Oversee technical planning, scripting, testing, and enterprise-wide deployment of Microsoft Defender for Endpoint agents.
• Coordinate onboarding of target endpoints using Microsoft Intune or Active Directory Group Policy.
• Ensure proper telemetry reporting, endpoint visibility, and adherence to Microsoft security best practices. Create and maintain security control test results, asset inventories, and remediation documentation in GRC repositories.
• Contribute to RMF artifact generation such as POA&Ms, data flow diagrams, and patch / upgrade schedules.
• Ensure all documentation reflects the latest changes to production environments and security tools.
• Lead architectural reviews and risk posture assessments to identify cybersecurity gaps and recommend remediation strategies.
• Evaluate logging efficiency, rule tuning, and threat detection performance across SIEM and endpoint platforms.
• Conduct quarterly executive reviews and operational touchpoints to align security posture with mission goals.
• Contribute to the development and maintenance of RMF documentation (POA&Ms, Security Assessment Reports, Security Plans).
• Validate and document security controls for systems affected by Defender and other ZTA tooling.
• Ensure compliance with NIST SP 800-53, 800-37, and FISMA standards across security solutions.

Qualifications

Our Equal Employment Opportunity Policy