OverviewDecisionPoint seeks an Endpoint Engineer to develop, maintain, deploy, and support standardized endpoint capabilities for the USMEPCOM ENLIST program. This position supports endpoint images, application packaging, device provisioning, software deployment, patching, configuration baselines, and Virtual Desktop Infrastructure.
The Endpoint Engineer supports physical and virtual endpoints throughout their lifecycle, including testing, deployment, configuration, patching, troubleshooting, refresh, recovery, and retirement. The engineer works with the Senior Endpoint Engineer and other technical teams to deliver secure, consistent, and supportable endpoint services across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP locations, and remote-user environments.
This role maintains a clear division of responsibility with Task 6 cybersecurity personnel. Task 6 identifies, prioritizes, and validates security findings. The Endpoint Engineer evaluates assigned findings, tests the approved correction, implements the operational change through established change-control procedures, and provides deployment evidence for cybersecurity validation.
This position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, incident response, on-site support, or travel may be required.
Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.
Duties & Responsibilities
The Endpoint Engineer will:
- Develop, test, maintain, and document standardized endpoint images.
- Maintain image components, operating-system settings, drivers, firmware dependencies, security baselines, required software, and deployment configurations.
- Support image versioning, testing, approval, release, rollback, and retirement processes.
- Validate endpoint images for functionality, compatibility, security, performance, and operational readiness.
- Develop and maintain automated device-deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles.
- Support endpoint deployment using approved Microsoft and Government management platforms.
- Administer approved endpoint-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies.
- Develop, test, maintain, and deploy application packages.
- Package commercial, Government, and internally developed software using approved formats and standards.
- Develop installation, detection, dependency, requirement, upgrade, repair, and removal logic.
- Test application packages for silent installation, accurate detection, compatibility, security, and clean removal.
- Troubleshoot package failures, dependency problems, application conflicts, detection errors, and deployment issues.
- Develop approved scripts and automation for provisioning, packaging, configuration, deployment, validation, and remediation.
- Maintain endpoint-management scripts and configurations in approved documentation and version-control repositories.
- Support patching of endpoint operating systems, applications, drivers, firmware, and management components.
- Configure and maintain pilot groups, deployment rings, production waves, maintenance windows, deadlines, and exception processes.
- Test operating-system updates, security patches, vendor patches, and application updates before production deployment.
- Monitor patch and deployment progress, failure rates, compliance status, endpoint health, and approved exceptions.
- Investigate failed patches and coordinate corrective actions, redeployment, rollback, or exception documentation.
- Engineer and support Virtual Desktop Infrastructure capabilities.
- Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, and endpoint-access policies.
- Troubleshoot VDI login, profile, application, display, performance, peripheral, and connectivity problems.
- Support VDI refreshes, upgrades, capacity activities, deployment, testing, and optimization.
- Coordinate VDI dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.
- Support endpoint deployment and refresh projects across geographically dispersed USMEPCOM locations.
- Assist with device provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement.
- Support operating-system upgrades, application migrations, technology refreshes, and endpoint-management transitions.
- Provide advanced engineering support for complex endpoint, image, application-packaging, deployment, patching, and VDI incidents.
- Analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence.
- Support root-cause analysis and implement approved corrective actions for recurring endpoint incidents.
- Assist with major incidents and outages involving endpoint management, software deployments, VDI, or widespread device failures.
- Implement approved workarounds and restoration actions during endpoint-related incidents.
- Coordinate with the Service Desk and field-support teams to improve troubleshooting, escalation, and knowledge content.
- Develop technical guidance for common endpoint, packaging, deployment, patching, and VDI problems.
- Review cybersecurity findings assigned to endpoint operations by Task 6.
- Assess operational impact, dependencies, testing requirements, deployment approach, and rollback requirements.
- Test and implement approved endpoint security changes through established change and release procedures.
- Execute assigned remediation involving endpoint images, software versions, patches, configurations, policies, or management settings.
- Track the affected endpoint population, deployment status, failures, exceptions, and completion results.
- Provide remediation and completion evidence to Task 6 for validation.
- Coordinate unresolved remediation issues with cybersecurity personnel, vendors, system owners, and Government stakeholders.
- Apply approved endpoint-security baselines and DISA Security Technical Implementation Guides.
- Support endpoint compliance reporting, configuration validation, vulnerability remediation, and audit-evidence collection.
- Maintain endpoint inventories, deployment records, image documentation, software-package records, patch status, VDI records, and configuration baselines.
- Develop and maintain standard operating procedures, packaging instructions, test plans, deployment plans, rollback procedures, and recovery documentation.
- Follow approved incident, problem, change, release, configuration, asset, security, and quality-management processes.
- Provide endpoint health, deployment, patching, compliance, risk, and issue information for program reporting.
Qualifications
Required Qualifications
Candidates must meet all of the following requirements:
- Active Secret clearance or higher.
- Bachelors degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category.
- Minimum of six years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related technical discipline.
- Experience developing or maintaining enterprise endpoint images.
- Experience developing, testing, and deploying application packages.
- Experience supporting endpoint provisioning, deployment, patching, configuration, and lifecycle management.
- Experience engineering or supporting Virtual Desktop Infrastructure.
- Experience implementing assigned endpoint-security or vulnerability-remediation changes.
- Experience troubleshooting complex endpoint, packaging, deployment, patching, or VDI issues.
- Knowledge of controlled testing, pilot deployment, phased implementation, validation, rollback, and change-management practices.
- Ability to maintain image documentation, software-package records, test plans, deployment plans, rollback procedures, and completion evidence.
- Microsoft 365 Certified: Endpoint Administrator Associate certification when relevant to the assigned Microsoft 365 or Intune environment.
- Ability to support after-hours maintenance, deployment windows, critical incidents, and endpoint recovery when required.
- Strong written, verbal, analytical, and technical problem-solving skills.
Preferred Qualifications
The following qualifications are preferred but are not required:
- Experience with Microsoft Intune or Microsoft Endpoint Manager.
- Experience with Microsoft Configuration Manager or System Center Configuration Manager.
- Experience with Windows Autopilot and modern device provisioning.
- Experience with Microsoft Defender for Endpoint.
- Experience with Microsoft Entra ID and hybrid endpoint management.
- Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.
- Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.
- Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.
- Experience supporting federal or Department of Defense endpoint environments.
- Experience applying DISA Security Technical Implementation Guides to Windows endpoints.
- Experience supporting Risk Management Framework controls, vulnerability remediation, or authorization evidence.
- Experience with endpoint analytics, compliance, configuration-management, or digital employee-experience tools.
- Experience supporting large-scale operating-system migrations, device refreshes, or endpoint-management modernization.
- CompTIA Security+ or another relevant security certification.
- ITIL v4 Foundation certification.
- Relevant Microsoft, VMware, Citrix, cloud, automation, or endpoint-management certification.
Skills and Competencies
- Enterprise endpoint engineering and support.
- Image development and automated deployment.
- Application packaging and software distribution.
- Operating-system and application patch management.
- Endpoint security-baseline implementation.
- VDI configuration, deployment, and troubleshooting.
- PowerShell and endpoint-management automation.
- Complex troubleshooting and root-cause analysis.
- Controlled testing, phased deployment, and rollback execution.
- Cybersecurity remediation and evidence development.
- Technical documentation and configuration management.
- Cross-functional engineering coordination.
- Strong attention to detail and change discipline.
