Senior Endpoint Management Engineer

Job description

In this role, you'll be instrumental in designing and enforcing endpoint baselines, conducting patching, executing vulnerability remediation, and implementing policy controls while leading modernization initiatives that encompass Microsoft Intune, Windows Autopilot, and Microsoft Defender for Endpoint. Furthermore, you will facilitate the resolution of complex endpoint-related issues, maintain operational procedures and documentation for audit preparedness, and mentor the technical team to enhance overall service performance and consistency.

Primary Responsibilities

Endpoint Lifecycle and Platform OperationsLead the operations and maintenance of SEC-issued endpoints including laptops, desktops, virtual computers, and mobile devices.Oversee provisioning, configuration, and decommissioning activities throughout the entire endpoint lifecycle, adhering to SEC standards.Manage enterprise application packaging, deployment, and maintenance for both baseline and mission-specific software.Oversee preproduction environments to validate configurations, updates, and releases prior to production deployment.Security, Compliance, and Policy GovernanceEstablish and uphold endpoint configuration baselines, compliance policies, and security controls for Windows and mobile platforms.Lead patch and vulnerability management efforts, including remediation planning and status reporting.Create and maintain standard operating procedures (SOPs) and operational documentation to support FISMA compliance and audit readiness.Ensure that endpoint operations align with SEC policy, zero-trust objectives, and approved change control processes.Intune Engineering and AutomationAct as the technical expert for Microsoft Intune in Windows environments, covering device configuration profiles, compliance policies, and application delivery.Lead Autopilot and onboarding workflows to enhance deployment speed, user preparedness, and consistency in provisioning.Design and implement PowerShell scripts and automation solutions to streamline operations and improve reliability.Integrate endpoint management workflows with other enterprise tools, enhancing visibility and service performance.Incident Resolution and Service ImprovementLead complex troubleshooting efforts for Autopilot enrollment failures, policy conflicts, and compliance issues.Coordinate with security, infrastructure, service desk, and vendor teams to resolve escalated incidents efficiently.Provide technical mentorship and oversight to endpoint engineers and support staff.Support endpoint SLA/operational reporting, tracking metrics related to patch compliance, incident trends, lifecycle status, and service outcomes.

Required Qualifications

US Citizenship required: Must meet contract requirements.Ability to obtain and maintain SEC Public Trust (or higher if required).Bachelor's degree in a relevant field such as Information Technology, Computer Science, or Engineering.Experience:

10+ years in endpoint engineering and enterprise endpoint management within complex IT environments. A degree may substitute for years of experience.Demonstrated subject matter expertise in Microsoft Intune for Windows endpoint administration and policy management.Experience supporting multi-platform endpoint environments, including Windows and mobile ecosystems.Proven experience in endpoint security, lifecycle management, troubleshooting, and documentation standards in regulated environments.Experience guiding endpoint modernization initiatives involving Windows Autopilot and Microsoft Defender for Endpoint.Technical Skills:

• Microsoft Intune (Windows endpoint management, compliance policies, application delivery)
• Multi-platform endpoint administration across Windows and mobile devices
• Windows lifecycle management and policy governance
• Endpoint security controls and compliance policy management

Windows Autopilot

• Microsoft Defender for EndpointPowerShell scripting and automation
• Enterprise application packaging and deployment
• Troubleshooting enrollment failures and compliance anomalies

Preferred Qualifications

• Experience with U.S. federal IT environments including FISMA, NIST, and zero-trust implementations.Hands-on experience with co-management or migration strategies for Intune and legacy platforms.Successfully created operational dashboards for compliance and SLA tracking.Strong experience leading cross-functional endpoint modernization projects in diverse work environments.Advanced troubleshooting expertise across identity and policy security integrations impacting endpoint compliance.Microsoft Certified: Endpoint Administrator Associate (MD-102)
• Microsoft Certified: Security Operations Analyst Associate (SC-200)ITIL 4 Foundation

Work Environment / Other

This position may require participation in on-call or surge support based on operational needs.Location: On-site at SEC HQ, Washington, DC.Travel may be necessary per contract requirements.At Leidos, we believe in innovation and challenge the status quo. We seek individuals who are ready to disrupt, provoke, and drive success. If this sounds like you, join us.