Endpoint Engineer – Journeyman

This is a fully remote position, open to applicants in Illinois.

📋 Description

• Create, test, maintain, and document standardized endpoint images.

• Oversee image components, operating-system configurations, drivers, firmware dependencies, security baselines, essential software, and deployment settings.

• Assist in image versioning, testing, approval, release, rollback, and retirement procedures.

• Validate endpoint images for functionality, compatibility, security, performance, and operational preparedness.

• Design and maintain automated device-deployment task sequences, provisioning workflows, enrollment methodologies, and configuration profiles.

• Manage endpoint management capabilities utilizing Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or similar technologies.

• Create, test, maintain, and distribute application packages.

• Package commercial, government, and internally developed software adhering to approved formats and standards.

• Formulate installation, detection, dependency, requirement, upgrade, repair, and removal logic.

• Diagnose package failures, dependency issues, application conflicts, detection errors, and deployment challenges.

• Create approved scripts and automation for provisioning, packaging, configuration, deployment, validation, and remediation.

• Assist with the patching of endpoint operating systems, applications, drivers, firmware, and management components.

• Set up and maintain pilot groups, deployment rings, production waves, maintenance windows, deadlines, and exception processes.

• Test updates and patches prior to production deployment; monitor progress, failure rates, compliance status, endpoint health, and exceptions.

• Investigate failed patches and coordinate corrective actions, redeployment, rollback, or exception documentation.

• Design and support Virtual Desktop Infrastructure capabilities, including base images, desktop pools, application delivery, user profiles, and endpoint-access policies.

• Troubleshoot VDI login, profile, application, display, performance, peripheral, and connectivity issues.

• Support VDI refreshes, upgrades, capacity activities, deployment, testing, and optimization.

• Coordinate dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.

• Assist with endpoint deployment and refresh initiatives across geographically diverse USMEPCOM locations.

• Provide advanced engineering support for intricate endpoint, image, application-packaging, deployment, patching, and VDI incidents.

• Analyze endpoint logs, deployment status, policy outcomes, management-platform data, and other technical evidence.

• Support root-cause analysis and implement approved corrective actions for recurring endpoint incidents.

• Aid in major incidents and outages related to endpoint management, software deployments, VDI, or widespread device failures.

• Collaborate with Service Desk and field-support teams to enhance troubleshooting, escalation, and knowledge content.

• Review and address assigned endpoint cybersecurity findings; test and implement approved security modifications through change and release procedures.

• Monitor affected endpoint populations, deployment status, failures, exceptions, and completion outcomes.

• Supply remediation and completion evidence to Task 6 for validation.

• Apply approved endpoint-security baselines and DISA Security Technical Implementation Guides.

• Assist with endpoint compliance reporting, configuration validation, vulnerability remediation, and audit-evidence collection.

• Maintain endpoint inventories, deployment records, image documentation, software-package records, patch status, VDI records, and configuration baselines.

• Create and uphold standard operating procedures, packaging instructions, test plans, deployment plans, rollback procedures, and recovery documentation.

• Adhere to approved incident, problem, change, release, configuration, asset, security, and quality-management processes.

• Provide information regarding endpoint health, deployment, patching, compliance, risk, and issues for program reporting.

⛳️ Requirements

• Active Secret clearance or higher.

• Bachelor’s degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category.

• At least six years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related technical field.

• Experience in developing or maintaining enterprise endpoint images.

• Experience in developing, testing, and deploying application packages.

• Experience supporting endpoint provisioning, deployment, patching, configuration, and lifecycle management.

• Experience in engineering or supporting Virtual Desktop Infrastructure.

• Experience implementing assigned endpoint-security or vulnerability-remediation changes.

• Proficient in troubleshooting complex endpoint, packaging, deployment, patching, or VDI issues.

• Familiarity with controlled testing, pilot deployment, phased implementation, validation, rollback, and change-management practices.

• Ability to maintain image documentation, software-package records, test plans, deployment plans, rollback procedures, and completion evidence.

• Microsoft 365 Certified: Endpoint Administrator Associate certification when relevant to the assigned Microsoft 365 or Intune environment.

• Willingness to support after-hours maintenance, deployment windows, critical incidents, and endpoint recovery when necessary.

• Strong written, verbal, analytical, and technical problem-solving abilities.

• Preferred: Experience with Microsoft Intune or Microsoft Endpoint Manager.

• Preferred: Experience with Microsoft Configuration Manager or System Center Configuration Manager.

• Preferred: Experience with Windows Autopilot and modern device provisioning.

• Preferred: Experience with Microsoft Defender for Endpoint.

• Preferred: Experience with Microsoft Entra ID and hybrid endpoint management.

• Preferred: Experience with PowerShell, Microsoft Graph, or similar endpoint-automation technologies.

• Preferred: Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.

• Preferred: Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.

• Preferred: Experience supporting federal or Department of Defense endpoint environments.

• Preferred: Experience applying DISA Security Technical Implementation Guides to Windows endpoints.

• Preferred: Experience supporting Risk Management Framework controls, vulnerability remediation, or authorization evidence.

• Preferred: Experience with endpoint analytics, compliance, configuration-management, or digital employee-experience tools.

• Preferred: Experience supporting large-scale operating-system migrations, device refreshes, or endpoint-management modernization.

• Preferred: CompTIA Security+ or another relevant security certification.

• Preferred: ITIL v4 Foundation certification.

• Preferred: Relevant Microsoft, VMware, Citrix, cloud, automation, or endpoint-management certification.

🏝️ Benefits

• Regular full-time employment.

• Remote work arrangement.

• Occasional after-hours maintenance, incident response, on-site support, or travel may be required.

• Active Secret clearance or higher.

• Microsoft 365 Certified: Endpoint Administrator Associate certification when relevant to the assigned Microsoft 365 or Intune environment.