Endpoint Service Desk Engineering Lead

Accountabilities

• • Lead enterprise endpoint engineering initiatives across Windows and macOS device environments, ensuring reliable and secure endpoint operations.
  • Own the full device lifecycle, including imaging, provisioning, patching, configuration management, remediation, and lifecycle updates.
  • Implement, maintain, and optimize endpoint management technologies such as Microsoft Intune, Autopilot, JAMF, Ivanti, and KACE.
  • Develop and execute automated deployment and configuration controls to improve scalability, consistency, and operational efficiency.
  • Establish and maintain patch validation, testing, and rollback procedures to reduce operational risk and service disruption.
  • Support secure baseline enforcement, endpoint compliance monitoring, and remediation activities across enterprise environments.
  • Create and maintain engineering documentation, including runbooks, standard operating procedures, and remediation workflows.
  • Provide escalation support and resolve complex endpoint engineering and operational issues.
  • Collaborate closely with DevSecOps, cybersecurity, and program management teams to align endpoint services with security and mission requirements.

  Requirements

  • Minimum 8 years of experience in IT, endpoint management, cybersecurity, or a closely related technical discipline.
  • At least 6 years of hands-on experience performing engineering functions within enterprise IT or endpoint environments.
  • Demonstrated expertise leading endpoint engineering, automation, enterprise device management, imaging, patching, configuration control, and remediation across Windows and macOS.
  • Practical experience with endpoint management platforms such as Intune, Autopilot, JAMF, Ivanti, and/or KACE.
  • Strong understanding of endpoint security, configuration management, patch management, compliance controls, and device lifecycle processes.
  • Ability to develop automation, deployment controls, validation procedures, and repeatable remediation workflows.
  • Strong troubleshooting, analytical, documentation, and problem-solving skills, with the ability to resolve complex engineering issues.
  • Effective communication and collaboration skills, particularly when working with cybersecurity, DevSecOps, and program management stakeholders.
  • A degree is not required; demonstrated technical expertise and relevant engineering experience are the primary qualifications.
  • Must be a U.S. citizen and able to obtain and maintain the required security clearance and complete applicable background investigations and security training.
  • An active Top Secret (TS) security clearance is required.
  • Ability to work remotely within the metropolitan Washington, DC area and occasionally work onsite or attend team meetings as required.

  Benefits

  • Annual salary of $155,000–$195,000.
  • Medical, dental, and vision insurance.
  • Flexible Spending Account (FSA).
  • Health Savings Account (HSA).
  • Life and Accidental Death & Dismemberment (AD&D) insurance.
  • Short-term and long-term disability coverage.
  • 401(k) retirement plan.
  • Tuition assistance.
  • Paid time off.
  • Remote work arrangement within the Washington, DC metropolitan area, with occasional onsite requirements.
  • Equal opportunity and reasonable accommodation support throughout the employment process.