End-User Computing (EUC) Engineer

Job description

The End-User Computing (EUC) Engineer provides advanced engineering support for SBA's enterprise end-user computing environment, focusing on the design, engineering, automation, and sustainment of endpoint platforms, device management infrastructure, and end-user computing technologies.

This role is distinguished from the Desktop / Field Support Technician by its focus on engineering, architecture, and platform-level work rather than individual incident resolution. The EUC Engineer designs and builds endpoint platforms, automation workflows, deployment pipelines, and configuration frameworks that enable the broader end-user services team to deliver consistent, high-quality support at scale.

This individual must be capable of operating autonomously on complex engineering tasks, demonstrating deep expertise in Microsoft endpoint management, device lifecycle engineering, and end-user computing automation in a Federal enterprise environment.

Key Responsibilities Endpoint Platform Engineering Lead engineering design, build, and optimization of SBA's enterprise endpoint computing platforms, including Windows 10/11 workstations, laptops, and mobile devices

Develop and maintain endpoint configuration baselines, hardening standards, and compliance frameworks aligned with NIST SP 800-53, CIS benchmarks, and SBA cybersecurity requirements

Engineer and maintain Microsoft Intune policies, configuration profiles, compliance baselines, and application deployment packages for SBA's endpoint fleet

Design and implement Windows Autopilot deployment workflows for zero-touch device provisioning and refresh

Lead endpoint platform testing, validation, and quality assurance for configuration changes and new deployments

Evaluate emerging endpoint technologies and recommend solutions aligned with SBA's enterprise environment and security requirements

Support development and maintenance of the endpoint engineering roadmap in coordination with the End-User Services Lead and Microsoft Infrastructure team

Device Management & Automation Engineer and maintain automated device management workflows using Microsoft Intune, PowerShell, and related tooling

Develop and maintain software packaging, deployment automation, and application lifecycle management processes

Design and implement automated patch management and software update workflows for Windows endpoints

Build and maintain automation scripts and tools that reduce manual effort and improve consistency across end-user computing operations

Engineer self-healing and remediation automation workflows that proactively address common endpoint issues without requiring manual intervention

Support development and maintenance of endpoint monitoring and alerting configurations in coordination with the NOC and Infrastructure teams

Configuration Management & Compliance Develop and maintain endpoint configuration management documentation, baselines, and change records

Engineer and maintain Group Policy Objects (GPOs) and Intune configuration profiles that enforce SBA security and compliance standards

Support endpoint compliance monitoring and reporting, providing actionable data to the End-User Services Lead and Service Management team

Lead remediation of endpoint compliance findings identified through security assessments, audits, and continuous monitoring

Coordinate with the Microsoft Infrastructure Administrator (Senior) on endpoint security policy alignment and enforcement

Maintain accurate and current endpoint configuration documentation in the Government ITSM platform and knowledge base

End-User Computing Infrastructure Engineer and maintain Virtual Desktop Infrastructure (VDI) or Windows Virtual Desktop (Azure Virtual Desktop) environments as applicable to SBA's environment

Support engineering and administration of enterprise software distribution platforms and application virtualization solutions

Maintain and optimize endpoint imaging and deployment infrastructure, including task sequences, driver libraries, and OS deployment workflows

Engineer and maintain mobile device management (MDM) configurations for SBA-issued smartphones and tablets

Support integration of end-user computing platforms with Microsoft Entra identity, conditional access, and Zero Trust Architecture frameworks

Coordinate with the Network Engineer T4 team on network requirements for endpoint management infrastructure

Security Engineering & Zero Trust Engineer endpoint security configurations aligned with Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09)

Design and implement Microsoft Defender for Endpoint configurations, policies, and automated response workflows

Support implementation of application control, device guard, and credential guard technologies across SBA's endpoint fleet

Engineer and maintain endpoint data loss prevention (DLP) configurations in coordination with the Microsoft Infrastructure team and Purview compliance solutions

Conduct endpoint security engineering reviews and provide recommendations for improving SBA's endpoint security posture

Support incident response activities involving endpoint security events in coordination with the NOC and Microsoft Infrastructure teams

Knowledge Management & Documentation Maintain comprehensive and current documentation of all endpoint platform configurations, engineering decisions, and operational procedures

Develop and maintain technical runbooks, engineering standards, and knowledge base articles for EUC engineering operations

Ensure all EUC engineering change activities are documented in the Government ITSM platform in accordance with ITIL 4 change management practices

Provide technical knowledge transfer to desktop support technicians and Service Desk staff on endpoint platform topics

Support transition-in and transition-out activities by providing complete and accurate EUC engineering documentation

Security & Compliance Ensure all EUC engineering activities comply with FISMA, NIST SP 800-53, FedRAMP, and SBA cybersecurity policies

Apply least-privilege and separation-of-duties principles to all endpoint management configurations and access controls

Adhere to all SBA policies regarding handling of CUI, SBU, and FOUO information

Promptly report suspected or confirmed security incidents involving endpoint platforms per SBA procedures

Support FISMA assessment and authorization activities for endpoint-related systems and platforms

Required Qualifications Experience Minimum 4–6 years of hands‑on enterprise end-user computing engineering experience

Demonstrated experience engineering and administering Microsoft Intune and endpoint management platforms at enterprise scale

Proven experience with Windows Autopilot, endpoint imaging, and automated deployment workflows

Experience developing PowerShell scripts and automation for endpoint management and administration

Experience in a Federal or private-sector enterprise environment of comparable scale, complexity, and security posture

Demonstrated experience with endpoint security engineering, including Microsoft Defender for Endpoint and endpoint hardening

Experience implementing Zero Trust Architecture principles across enterprise endpoint environments

Familiarity with NIST SP 800-53 and CIS benchmark controls as applied to endpoint platforms

Technical Expertise Microsoft Endpoint Manager (Intune) engineering, policy design, and automation

Windows 10/11 platform engineering and configuration management

Windows Autopilot and zero‑touch deployment workflows

PowerShell scripting for endpoint management and automation

Microsoft Defender for Endpoint configuration and policy management

Group Policy Objects (GPOs) and Intune configuration profiles

Software packaging, deployment automation, and application lifecycle management

Endpoint compliance monitoring and remediation

Strong working knowledge of

Microsoft Azure Active Directory (Entra ID) and conditional access

Zero Trust Architecture and OMB M-22-09 endpoint requirements

NIST SP 800-53 and CIS benchmark controls for endpoints

Microsoft Purview DLP and information protection

ITSM platforms (e.g., ServiceNow)

ITIL 4 change and incident management practices

Enterprise network fundamentals relevant to endpoint management

Required Certifications (Must be current and unexpired throughout performance)

Microsoft Certified: Modern Desktop Administrator Associate (MD-102) (required)

CompTIA Security+ (required)

Additional preferred certifications

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Microsoft Certified: Security Operations Analyst Associate (SC-200)

CompTIA Network+

ITIL 4 Foundation

Our Equal Employment Opportunity Policy The company is an equal opportunity employer. The company shall not discriminate against any employee or applicant because of race, color, religion, creed, ethnicity, sex, sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), national origin or ancestry, age, disability, citizenship, military/veteran status, marital status, genetic information or any other characteristicprotected by applicable federal, state, or local law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.

If you require an accommodation to navigate or apply for a position on our website, please get in touch with Heaven Wood via e‑mail at accommodations@koniag-gs.com or by calling 703‑488‑9377 to request accommodations.

Koniag Government Services (KGS) is an Alaska Native Owned corporation supporting the values and traditions of our native communities through an agile employee and corporate culture that delivers Enterprise Solutions, Professional Services and Operational Management to Federal Government Agencies. As a wholly owned subsidiary of KGS, we apply our proven commercial solutions to a deep knowledge of Defense and Civilian missions to provide forward leaning technical, professional, and operational solutions. KGS enables successful mission outcomes for our customers through solution-oriented business partnerships and a commitment to exceptional service delivery.

We ensure long‑term success with a continuous improvement approach while balancing the collective interests of our customers, employees, and native communities. For more information, please visit www.koniag-gs.com.

Equal Opportunity Employer/Veterans/Disabled.Shareholder Preference in accordance with Public Law 88-352