Senior Endpoint Engineer

Salary Range: 125000 to 155000 (Currency: USD) (Pay period: per-year-salary)

Key Tasks & Responsibilities

Serve as senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.
Design, build, test, and maintain standardized endpoint images, including drivers, OS settings, security baselines, and required software, and establish image versioning, release, rollback, and retirement procedures.
Develop automated deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles using Microsoft Intune, Configuration Manager, Windows Autopilot, or comparable platforms.
Package commercial, Government, and internally developed software with installation, detection, dependency, upgrade, and removal logic, and test and troubleshoot package deployments.
Develop and maintain approved scripts and automation for provisioning, packaging, configuration, and remediation in version-control repositories.
Design and administer endpoint patching for operating systems, applications, drivers, and firmware, establishing pilot groups, deployment rings, maintenance windows, and exception processes; test updates and monitor compliance.
Engineer and support VDI base images, desktop pools, application delivery, and user profiles; troubleshoot login, profile, performance, and connectivity issues; and coordinate dependencies with virtualization, storage, network, and identity teams.
Support endpoint deployment and refresh projects, OS upgrades, application migrations, and endpoint-management transitions, developing technical implementation plans.
Provide Tier 3/Tier 4 engineering support for complex endpoint, packaging, deployment, patching, and VDI incidents, including major incidents and root-cause corrective actions, and improve Service Desk and field-support knowledge content.
Review cybersecurity findings assigned to endpoint operations, assess operational impact and rollback needs, implement approved remediation through change and release procedures, and provide completion evidence; apply DISA STIGs and endpoint-security baselines.
Maintain endpoint inventories, image and package records, patch status, VDI documentation, SOPs, and deployment and rollback plans, and provide endpoint health and compliance information for program reporting.

Education & Experience

Required:

Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category.

Minimum of eight (8) years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related discipline.

Experience designing and maintaining enterprise endpoint images and developing, testing, and deploying application packages.

Experience supporting endpoint provisioning, deployment, patching, configuration, lifecycle management, and VDI.

Experience implementing endpoint-security or vulnerability-remediation changes using controlled testing, phased deployment, validation, and rollback practices.

Strong written, verbal, analytical, and technical problem-solving skills.

Preferred:

Experience with Microsoft Intune, Configuration Manager, Windows Autopilot, Defender for Endpoint, and Entra ID hybrid endpoint management.

Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.

Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.

Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.

Experience supporting federal or DoD endpoint environments, including DISA STIGs and RMF remediation evidence.

Experience supporting large-scale OS migrations, device refreshes, or endpoint-management modernization.

Certifications

Required: Microsoft 365 Certified: Endpoint Administrator Associate, when relevant to the assigned Microsoft 365 or Intune environment.
Preferred: CompTIA Security+ or another security certification, ITIL 4 Foundation, or relevant Microsoft, VMware, Citrix, cloud, or automation certification.

Security Clearance

• Active Secret clearance or higher is required.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

Work Environment / Travel:

Remote position; Chicago, IL–area candidates preferred.

Occasional after-hours maintenance, deployment windows, critical incident support, on-site work, or travel may be required.

Administrative Notes:

Period of Performance: March 1, 2027 – February 28, 2033

Contract Start Date: March 1, 2027

Note: By applying to this position, the candidate acknowledges and consents to having their resume included in an active competitive Government contract bid.