Endpoint Engineer (Senior)

• Serve as senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.
• Design, build, test, and maintain standardized endpoint images, including drivers, OS settings, security baselines, and required software, and establish image versioning, release, rollback, and retirement procedures.
• Develop automated deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles using Microsoft Intune, Configuration Manager, Windows Autopilot, or comparable platforms.
• Package commercial, Government, and internally developed software with installation, detection, dependency, upgrade, and removal logic, and test and troubleshoot package deployments.
• Develop and maintain approved scripts and automation for provisioning, packaging, configuration, and remediation in version-control repositories.
• Design and administer endpoint patching for operating systems, applications, drivers, and firmware, establishing pilot groups, deployment rings, maintenance windows, and exception processes; test updates and monitor compliance.
• Engineer and support VDI base images, desktop pools, application delivery, and user profiles; troubleshoot login, profile, performance, and connectivity issues; and coordinate dependencies with virtualization, storage, network, and identity teams.
• Support endpoint deployment and refresh projects, OS upgrades, application migrations, and endpoint-management transitions, developing technical implementation plans.
• Provide Tier 3/Tier 4 engineering support for complex endpoint, packaging, deployment, patching, and VDI incidents, including major incidents and root-cause corrective actions, and improve Service Desk and field-support knowledge content.
• Review cybersecurity findings assigned to endpoint operations, assess operational impact and rollback needs, implement approved remediation through change and release procedures, and provide completion evidence; apply DISA STIGs and endpoint-security baselines.
• Maintain endpoint inventories, image and package records, patch status, VDI documentation, SOPs, and deployment and rollback plans, and provide endpoint health and compliance information for program reporting.

Required:

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category.
• Minimum of eight (8) years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related discipline.
• Experience designing and maintaining enterprise endpoint images and developing, testing, and deploying application packages.
• Experience supporting endpoint provisioning, deployment, patching, configuration, lifecycle management, and VDI.
• Experience implementing endpoint-security or vulnerability-remediation changes using controlled testing, phased deployment, validation, and rollback practices.
• Strong written, verbal, analytical, and technical problem-solving skills.

Preferred:

• Experience with Microsoft Intune, Configuration Manager, Windows Autopilot, Defender for Endpoint, and Entra ID hybrid endpoint management.
• Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.
• Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.
• Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.
• Experience supporting federal or DoD endpoint environments, including DISA STIGs and RMF remediation evidence.
• Experience supporting large-scale OS migrations, device refreshes, or endpoint-management modernization.

• Required: Microsoft 365 Certified: Endpoint Administrator Associate, when relevant to the assigned Microsoft 365 or Intune environment.
• Preferred: CompTIA Security+ or another security certification, ITIL 4 Foundation, or relevant Microsoft, VMware, Citrix, cloud, or automation certification.

Work Environment / Travel:

• Remote position; Chicago, IL–area candidates preferred.
• Occasional after-hours maintenance, deployment windows, critical incident support, on-site work, or travel may be required.

Administrative Notes:

Period of Performance: March 1, 2027 – February 28, 2033

Contract Start Date: March 1, 2027

The offered rate will be based on the selected candidate's knowledge, skills, abilities and/or experience and in consideration of internal parity. The posted range is appropriate for a typical candidate meeting, at a minimum, all the core requirements of the position.