Systems Engineer 3 at Wyetech
Ft. Meade
$115,898–$286,749
Jul 16, 2026
Ft. Meade
Jul 21, 2026
What this job asks for AI summary
A senior-level endpoint security engineering role supporting the NSA's enterprise EDR program within a classified, multi-domain environment. The work centers on architecting, deploying, and optimizing Microsoft Defender for Endpoint and Trellix HX across on-premises, cloud, and VDI infrastructures, including writing KQL and YARA-based threat indicators. The role also involves advising government stakeholders, supporting SOC incident response, and mentoring junior engineers. Twenty years of systems engineering experience and an active TS/SCI with polygraph are required.
Senior level · 20+ years · Baltimore-Columbia-Towson, MD · TS/SCI clearance
Pay in the description: $55.72–$137.86/hr
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $141,208 (middle half $106,798–$194,505). This posting is about at that midpoint.
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (10)
The role is primarily an endpoint security / EDR engineering role at NSA, making 15-1212 (Information Security Analysts) the best fit; however, the extensive systems engineering lifecycle responsibilities (DoDAF, SOA, CCB, JCIDS, requirements management) create a genuine pull toward 15-1211 (Computer Systems Analysts).
The posting requires 20 years of Systems Engineering experience. A Bachelor's degree in a relevant discipline is required, but the JD explicitly states that 5 additional years of SE experience may be substituted — so the degree requirement is set to None.
TS/SCI with agency-appropriate polygraph is a hard gate per the Required Qualifications section.
MECM/SCCM and Intune are listed as interchangeable MDE deployment mechanisms in the same requirement; MECM is used as the primary name with Intune as the alternative.
SC-200 and AZ-500 are listed together as interchangeable vendor certification options under Desired Technical Skills; Trellix Certified Engineering is a third alternative for the same desired credential.
DoD 8570/8140 IAM Level II or III baseline certification is listed under Required Technical Skills and treated as a hard gate.
The pay range ($55.72–$137.86/hr) is described as a guideline that varies by contract rate, experience, and location — the wide spread reflects the government contracting context.
Work locations span Maryland, Virginia, Colorado, Texas, Utah, Alaska, Hawaii, and OCONUS; the NSA context strongly implies the Fort Meade, MD area as the primary site, so the CBSA is set to Baltimore-Columbia-Towson, MD.
Ignored 1 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): Microsoft Defender for Endpoint.
Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.