Senior Windows and Desktop Engineer

About SBC Innovations:

Join SBC Innovations and contribute to cutting-edge systems integration in a dynamic federal enterprise environment. Please help us maintain and enhance our enterprise-level IT systems, ensuring security, efficiency, and optimal performance across our extensive network of devices.

At SBC Innovations, we are dedicated to finding and hiring talented individuals with the right attitude, tenacity, and motivation. We truly believe in the value you bring to our organization.

Position Overview:

SBC Innovations is seeking an experienced Desktop & Windows Engineer Subject Matter Expert (SME) to provide advanced engineering, development, testing, and operational support for enterprise Windows desktop environments.

The position focuses on developing, implementing, and maintaining standardized Windows Operating System (OS) images, enterprise software deployment solutions, endpoint management technologies, and security configurations within a large-scale federal government environment.

The ideal candidate possesses extensive experience with Windows 11, Microsoft Endpoint Configuration Manager (MECM), Microsoft Deployment Toolkit (MDT), Microsoft Intune, PowerShell automation, and enterprise endpoint security.

Must be U.S. Citizen Must meet DOJ residency requirements Work Location: Washington, DC Must be able to obtain up to a Secret security clearance

The primary scope of duties include:

• Develop, test, implement, and maintain enterprise Windows desktop operating system images.
• Engineer and support large-scale software deployments using MECM, MDT, and Configuration Manager Operating System Deployment (OSD).
• Develop, test, and deploy software distribution packages, application updates, and system configurations across desktops, laptops, tablets, and servers.
• Design and implement automated Windows desktop and server deployment processes.
• Develop and maintain PowerShell and VBScript automation for system configuration, software installation, and troubleshooting.
• Support enterprise patch management solutions, including HCL BigFix, Windows Update, and MECM.
• Analyze, evaluate, and recommend enterprise desktop, laptop, tablet, and server hardware.
• Implement endpoint security configurations, vulnerability remediation, and compliance controls.
• Troubleshoot complex Windows operating system, application, deployment, and hardware issues.
• Provide technical recommendations and engineering solutions to meet enterprise operational requirements.

Minimum Candidate Requirements:

• Bachelor's degree in Computer Science, Business, or another relevant discipline.
• Ten (10) years of relevant professional experience may be substituted for the degree requirement.
• Demonstrated expertise in Windows desktop engineering, enterprise operating system deployment, and endpoint management.
• Experience supporting large-scale enterprise Windows environments.
• Strong knowledge of enterprise security standards, patch management, and system configuration practices.

Security Requirements:

Must be able to obtain up to a Secret security clearance.

Candidates must be United States Citizens and meet applicable DOJ residency, background investigation, and security suitability requirements.

Scope of Work and Requirements:

• Provide subject matter expertise in the design, development, testing, deployment, and maintenance of Windows desktop operating system images.
• Engineer robust enterprise deployment solutions using MECM, MDT, OSD, Microsoft Intune, and related endpoint management technologies.
• Develop and maintain software installation packages, deployment sequences, and automated provisioning processes.
• Support Windows 11 operating system architecture, configuration, and enterprise integration.
• Administer and support Active Directory, Group Policy Objects (GPOs), Organizational Units (OUs), and domain services.
• Implement device management policies, compliance configurations, and Windows Update for Business.
• Develop automation scripts for operating system deployment, configuration management, reporting, and troubleshooting.
• Manage enterprise device drivers, firmware updates, hardware standards, and lifecycle processes.
• Support enterprise networking configurations, including DNS, DHCP, VPN connectivity, and certificate management.
• Implement endpoint security technologies, including BitLocker, Microsoft Defender for Endpoint, application control, and privilege management.
• Perform vulnerability scan reviews, security assessments, patch management, documentation, and auditing activities.
• Support virtualization technologies, including Virtual Desktop Infrastructure (VDI) and Hyper-V.
• Provide technical documentation, engineering recommendations, and operational support for enterprise desktop infrastructure.

Skill Sets Anticipated:

• Windows 11 operating system architecture, administration, and troubleshooting
• Microsoft Endpoint Configuration Manager (MECM/SCCM)
• Microsoft Deployment Toolkit (MDT) and Operating System Deployment (OSD)
• Microsoft Intune and Windows Autopilot
• Active Directory, Group Policy, and domain services
• PowerShell scripting and enterprise automation
• VBScript, C#, Visual Basic, and .NET
• Windows Update for Business and HCL BigFix
• Microsoft Entra ID (Azure AD) and Conditional Access
• Endpoint security, BitLocker, and Microsoft Defender for Endpoint
• Enterprise application packaging and software distribution
• Desktop imaging, provisioning, and configuration management
• Device compliance, configuration profiles, and lifecycle management
• DNS, DHCP, VPN, PKI, and certificate services
• Windows Event Viewer, Log Analytics, and SIEM platforms
• Virtual Desktop Infrastructure (VDI) and Hyper-V
• Vulnerability remediation and security compliance

Preferred Technical Experience:

• Advanced PowerShell development, including custom modules and enterprise-scale workflow automation.
• Cloud-based endpoint management using Microsoft Intune, Entra ID, Conditional Access, and Defender for Endpoint.
• Modern provisioning technologies, including Windows Autopilot, Enrollment Status Page (ESP) customization, and scripted deployments.
• Zero Trust endpoint security principles and secure configuration baselines.
• Public Key Infrastructure (PKI), certificate services, and enterprise certificate management.
• Advanced Windows troubleshooting using Process Monitor (ProcMon), WinDbg, symbols, and performance analysis tools.

Key Competencies

• Strong analytical and problem-solving skills
• Excellent communication and stakeholder engagement abilities
• Ability to manage multiple priorities and work under tight deadlines
• Close attention to detail and commitment to operational excellence
• Strong technical documentation and troubleshooting capabilities
• Ability to work independently and collaboratively within enterprise engineering teams
• Ability to design scalable, secure, and reliable technical solutions

Who You Are:

You are energized when faced with complex technical challenges and diligently work to identify creative solutions that address these issues effectively. You possess the ability to perform high-quality work, both independently and as part of a team, in a fast-moving and dynamic environment. You have a strong ability to plan and prioritize tasks, enabling you to consistently meet and exceed customer expectations.

You bring advanced expertise in Windows desktop engineering, enterprise endpoint management, and automation, with a commitment to delivering secure, scalable, and reliable solutions.

*Salary is Negotiable

Job Type:

Full-Time W2 or 1099/C2C

Medical Benefits & 401(k) are available for W2 full-time employees.

Clearance Level

Must be able to obtain up to a Secret security clearance.

Requirements

• Must be U.S. Citizen
• Must meet DOJ residency requirements
• Work location: 175 N Street NE, Washington, DC 20002
• Must meet applicable federal background investigation and security suitability requirements
• Must be able to obtain the required security clearance