Bachelor's degree with 4+ years of relevant experience, or Master's degree with 2+ years (additional experience may substitute for degree)
Active DoD Secret clearance
Proven experience with Microsoft Intune implementation and administration
Hands-on experience with packaging and deploying Windows applications via Intune
Strong proficiency in PowerShell scripting for automation and troubleshooting
Experience collaborating with customers and stakeholders for technical solutions
Excellent communication and organizational skills, capable of managing multiple priorities
Working knowledge of Atlassian tools like Jira and Confluence for project management
Responsibilities
Lead design and deployment of Microsoft Intune solutions for security and compliance
Drive migration from MECM and traditional AD to Azure AD and Intune environments
Develop and manage Intune policies, compliance, and application deployment strategies
Package and lifecycle-manage applications in Intune with a focus on automation
Architect Windows 10/11 provisioning solutions using Intune and modern techniques
Optimize Windows Update for Business for secure OS patching
Collaborate with teams to modernize Group Policy Objects into Intune controls
Partner with AD and MECM/SCCM teams for migration readiness
Integrate Intune with Microsoft 365 ecosystem and Zero Trust models
Implement endpoint security best practices and monitor incidents
Identify and recommend optimizations for endpoint management processes
Develop comprehensive technical documentation for architecture and migration
Benefits
Opportunity to work on a high-impact digital modernization initiative
Engagement with cutting-edge technologies in endpoint management
Collaboration with diverse teams across engineering and security
Potential for professional growth and skill enhancement in a dynamic environment
Support for obtaining relevant certifications and training opportunities
Full Job Description
GES is seeking a highly skilled Senior Unified Endpoint Management (UEM) Engineer to support the Defense Enclave Services (DES) program-an enterprise-scale digital modernization initiative for the Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies.
In this role, you will lead the design, implementation, and optimization of modern endpoint management solutions, with a primary focus on Microsoft Intune and cloud-native device management. You will play a key role in migrating legacy environments (MECM and on-premises Active Directory) to Azure AD-joined, Intune-managed endpoints, helping drive secure, scalable, and user-centric solutions across the enterprise.
This position requires both deep technical expertise and the ability to collaborate across engineering, security, and operations teams to deliver resilient and compliant endpoint solutions.
Primary Responsibilities
Lead the design, architecture, and deployment of Microsoft Intune solutions aligned with enterprise security, compliance, and user experience requirements
Drive endpoint modernization efforts, including migration from MECM and traditional AD-joined devices to Azure AD-joined and Intune-managed environments
Develop and manage Intune policies and configurations, including compliance policies, configuration profiles, and application deployment strategies
Package, deploy, and lifecycle-manage applications in Intune, emphasizing automation, version control, and end-user experience
Architect and implement Windows 10/11 provisioning and deployment solutions using Intune, Autopilot, Enrollment Status Page (ESP), and modern provisioning techniques
Configure and optimize Windows Update for Business (WUfB) to ensure secure, reliable, and timely OS patching
Collaborate with infrastructure and identity teams to translate and modernize Group Policy Objects (GPOs) into Intune-based controls (Settings Catalog, ADMX-backed policies)
Partner with Active Directory and MECM/SCCM teams to ensure coexistence strategies and migration readiness
Integrate Intune with the broader Microsoft 365 ecosystem, including Defender for Endpoint, Conditional Access, and Zero Trust security models
Implement and enforce endpoint security best practices, including encryption, endpoint protection, compliance baselines, and data loss prevention
Support security operations by monitoring endpoint-related incidents and integrating telemetry with SIEM/SOC workflows
Identify opportunities to optimize endpoint management processes, recommending improvements and driving adoption of modern management capabilities
Develop and maintain comprehensive technical documentation, including architecture diagrams, configuration standards, and migration strategies
Required Qualifications
Bachelor's degree with 4+ years of relevant experience, or Master's degree with 2+ years of experience (additional experience may be considered in lieu of degree)
Active DoD Secret clearance
Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
Strong proficiency in PowerShell scripting to automate administrative tasks, streamline deployments, and troubleshoot endpoint issues.
Experience collaborating directly with customers, end users, and stakeholders to gather requirements, provide project updates, and deliver technical solutions.
Excellent communication, organizational, analytical, and problem-solving skills with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
Working knowledge of Atlassian tools, including Jira and Confluence, for project tracking, documentation, and team collaboration.
Current DoD 8570 IAT Level II certification (e.g., Security+ CE, CISSP)
Desired Qualifications
Microsoft certifications such as Microsoft Endpoint Administrator Associate or Microsoft 365 Certified: Endpoint Administrator Expert
Experience with large-scale enterprise migrations to cloud-native endpoint management
Familiarity with Zero Trust architecture and modern identity/security frameworks
Experience integrating endpoint management with SIEM/SOC platforms
