Establish hardened system images, configuration baselines, patching and vulnerability remediation processes, and compliance validation for endpoints, servers, and applicable containerized workloads, including controlled software delivery in air-gapped environments. Work directly with ISSMs, ISSOs, and Cybersecurity teams through JSIG or comparable authorization processes, including applicable RMF/DAAPM requirements; implement technical controls, document changes, support assessments, and maintain security evidence and approved baselines.