Endpoint Engineer

We are seeking a highly skilled and innovative Endpoint Engineer to join our team in the greater DMV area, supporting the Army National Guard.

Responsibilities

• Lead enterprise endpoint engineering operations for workstations, mobile devices, and virtual desktop environments, defining configuration standards and lifecycle management strategies.
• Design and enforce endpoint security baselines, STIG implementation plans, patch management frameworks, and hardening procedures to meet RMF/DoD/Army requirements.
• Oversee endpoint management platforms (e.g., MECM, Intune): policy design, large‑scale deployments, agent lifecycle, and configuration governance.
• Direct vulnerability remediation coordination: validate patch strategies, manage agent updates, and ensure accurate compliance reporting.
• Integrate endpoint services with Army 365, enterprise collaboration, and authentication architectures to enable secure user access and seamless operations.
• Implement drift detection, performance optimization, automation, and remediation workflows to maintain baseline integrity and operational efficiency.
• Produce and maintain documentation: baselines, runbooks, change logs, and audit evidence for accreditation and inspections.
• Coordinate with SOC/CIRT, NOC, cybersecurity engineering, and application teams to support incident response and investigative activities involving endpoints.

#ENOCS

Qualifications

• Minimum of 8 years with BS/BA; Minimum of 6 years with MS/MA; Minimum of 3 years with PhD

• Clearance: Active TS/SCI clearance.

• Candidate must meet ONE of the following:

  • Master’s degree or Ph.D. in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, Software Engineering, or a related field; OR
  • Relevant DoD/military training (examples: M0923W1; A‑102‑5888; A‑102‑5599 (SNOOP); C‑150‑1401; W‑150‑4575; S‑250‑1095; A‑531‑0022; A‑531‑0009; A‑531‑0045; A‑113‑0381; A‑113‑0342; A‑121‑0594 (P/L); A‑104‑0084; A‑150‑4219 (P/L); A‑150‑9020 (P/L); C‑531‑0038); OR
  • Relevant professional certification or equivalent experience (examples: SecurityX/CASP+; CCNP Security; CCSP; FITSP‑O; GFACT).

• Required experience and skills:

  • Endpoint engineering, systems administration, or device management experience with at least 3 years leading enterprise endpoint programs.
  • Deep hands‑on expertise with MECM (SCCM), Intune/Endpoint Manager, group policy, imaging/OS deployment, patch management, and EDR/AV integration.
  • Strong knowledge of DISA STIG application to endpoints, RMF/ATO evidence requirements, patching cycles, and compliance reporting workflows.
  • Proven ability to design and enforce secure baselines, implement automation for configuration drift remediation, and produce audit‑quality documentation.
  • Experience coordinating cross‑functional remediation with cybersecurity, SOC/CIRT, and application owners; strong troubleshooting and incident support skills.

• Desired:

  • Prior DoD/ARNG endpoint management or classified environment experience.
  • Experience with VDI/Desktop virtualization platforms, mobile device management at scale, and endpoint hardening for multi‑domain environments.
  • Background in scripting/automation (PowerShell, Python), telemetry integration, and tools for baseline validation and compliance dashboarding.

#ENOCS