Endpoint Engineer – Intune

The Role

Urgent opening supporting a federal desktop support services program. Lead enterprise endpoint engineering across Microsoft Intune, SCCM/MECM, and Azure. This hybrid role is primarily remote, but candidates must live in the DMV—Washington, DC, Maryland, or Virginia—to attend customer meetings. Candidates must currently hold or be able to obtain the required Public Trust determination. One opening is available under the Senior Software Engineer labor category.

Why This Role

• Manage device provisioning, application deployment, patching, compliance enforcement, conditional access, and hybrid identity
• Automate operations with PowerShell and support Windows servers, desktop troubleshooting, and Windows 11 imaging
• Integrate Azure AD and on-premises Active Directory; work with Azure Automation, Azure Functions, system templates, and images
• Implement Azure-based security solutions, including Azure Security Center and Azure Sentinel
• Support patch compliance, customer SLAs, IAVA processes, and operational problem resolution
• Provide technical leadership, mentor less-experienced engineers, and evaluate emerging technologies

What You Bring

• Must live in the DMV—Washington, DC, Maryland, or Virginia—and be available to attend customer meetings
• Must currently hold or be able to obtain the required Public Trust determination
• Meet one education/experience path: master's degree plus 10 years of applicable experience; bachelor's degree plus 13 years; associate's degree plus 15 years; or 19 years of applicable experience without a degree
• 5+ years of SCCM software packaging and patching
• 5+ years of Intune Autopilot administration
• Intune/SCCM device enrollment, policy management, application deployment, compliance enforcement, and conditional access
• MDT/SCCM imaging experience, including .WIM capture, packages, advertisements, task sequences, OSD, and queries
• Strong PowerShell automation
• Windows Server 2016/2019/2022, Windows 11 imaging, and server/desktop troubleshooting
• Active Directory security groups, OUs, DNS, and GPO management
• Solid VMware vCenter knowledge and functional Microsoft SQL Server knowledge
• IAVA processes, including CYBERCOM release, testing, approval, and deployment
• Networking, VPN, and certificate-based authentication
• Microsoft Certified: Endpoint Administrator Associate
• SCCM certification, as specified by the client
• Preferred: Microsoft 365 Certified: Endpoint Manager Specialist and Microsoft 365 Certified: Modern Desktop Administrator Associate
• Preferred: additional Autopilot experience and Microsoft Azure platform/cloud-services familiarity