Zero Trust (ZT) Systems Engineering Technical SME (Devices)

The intern will be trained to serve as the agency's primary technical advisor for the CISA ZTMM v2.0 Devices pillar. This role advances TSA's ability to enforce ZT principles at the endpoint level by providing senior-level advisory on devic posture management, CDM integration, EDR compliance, and health attestation across its enterprise endpoint environment. The expected outcome is a continuously advancing Devices pillar maturity posture, with device inventory integrity assured, device telemetry actively informing access enforcement, and device posture signals integrated into cross-pillar ZT decisions. This is a senior technical advisory role requiring hands-on endpoint engineering experience in a federal environment.

General DutiesServe as the primary technical advisor for the CISA ZTMM v2.0 Devices pillar across endpoint security, device posture management, and Continuous Diagnostics and Mitigation integration domains.Continuously assess the agency's device inventory and endpoint security posture against CISA ZTMM v2.0 Devices pillar criteria and NIST SP 800-207; proactively identify emerging device risk indicators and deliver real-time advisory recommendations.Provide technical advisory guidance on IoT/OT platform strategies (e.g., Microsoft Intune, Jamf), recommending configuration approaches and compliance policy design aligned to ZT principles for agency adoption.Evaluate device telemetry integrity and advise on recommended approaches for integrating device posture signals into ZT access enforcement decisions.Advise on EDR capabilities, patch compliance strategies, and device health attestation approaches; develop recommended solutions for agency review.Provide advisory support for the development and maturation of Devices pillar entries in the Common Control Catalog (CCC), ensuring traceability to NIST SP 800-53 Rev. 5 control families.Develop recommended Devices pillar inputs to the ZT Roadmap, IG FISMA maturity reporting, dashboard scoring, and enterprise performance reporting for agency review and approval.Collaborate with Identity, Network, Data, and Applications SMEs to ensure device posture approaches integrate coherently into cross-pillar ZT enforcement decisions.Review device-related policy documents and technical standards; identify gaps relative to ZT mandates and develop recommended updates for agency concurrence.Support all device and endpoint-related ZT data calls, audits, and compliance reporting by providing advisory analysis and recommended responses.Prepare and present technical findings, maturity assessments, and advisory recommendations to senior leadership and the CISO.Leverage AI-assisted analysis tools, automation platforms, and prompt engineering techniques to enhance advisory productivity, accelerate gap analysis and documentation tasks, and enable focus on higher-value technical advisory work; apply all AI capabilities in accordance with agency acceptable use policies and Zermount's ethical AI use guidelines.

Education & CertificationsMinimum of a Bachelor of Science (or higher) in Information Technology, Computer Science, Systems Engineering, Cybersecurity, or a related field.Required: Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM), or equivalent certification.Strongly preferred: Microsoft Certified: Endpoint Administrator (MD-102) or equivalent MDM/UEM vendor certification.Strongly preferred: CompTIA Security+ (acceptable as primary only for candidates with 10+ years demonstrated technical depth and active CISSP/CISM pursuit).

Hybrid – Primarily Remote. Occasional onsite work required at the client location in Springfield, VA and Zermount HQ in Arlington, VA.

No reviews yet. Reviews unlock for candidates 30 days after adding this program to their tracker — integrity over volume.