APPLICATION PACKAGING ENGINEER

Empower AI Inc.•Quantico, VA

10d•$91,280 - $141,280•Onsite

About The Position

Empower AI is seeking an Application Packaging Engineer to package, test, secure, and deploy enterprise applications for thousands of endpoints supporting a Department of War agency across Pre-Production, NIPRNet, SIPRNet, and JWICS enclaves. The engineer analyzes application installation behavior and dependencies, engineers silent and STIG-compliant deployment packages (MSI/MSIX/App-V/Intune Win32), validates them in pre-production and the Digital Twin environment, and deploys them through MECM/SCCM and Intune with clean removal paths. The role owns the application catalog's quality and supports software lifecycle management by retiring end-of-life applications and supporting license reconciliation. This is a salaried, FLSA-exempt position in which you will independently analyze situations, determine the appropriate course of action, and exercise discretion and independent judgment on matters of significance to the program and its customers. THIS IS AN ONSITE ROLE IN QUANTICO, VA (RKB) WITH UP TO 10% OF TRAVEL INVOLVED.

Requirements

Bachelor's degree and a minimum of 3 years of related experience (an additional 4 years of related experience may be substituted for the degree).
Must be a U.S. Citizen.
Must have an Active Top Secret Clearance with SCI eligibility (favorably adjudicated T5/T5R) to start.
Must be within investigation scope and/or currently enrolled in Continuous Evaluation / Continuous Vetting.
Must possess and maintain a current DoD 8570/8140 IAT Level II baseline certification (e.g., CompTIA Security+ CE, CySA+, GSEC, SSCP, or CCNA-Security).
Demonstrated ability to work independently, analyze problems, determine the appropriate course of action, and exercise discretion and independent judgment with limited day-to-day supervision.
Minimum of 3 years of experience in systems engineering, infrastructure engineering, or senior systems administration in an enterprise Windows environment.
Hands-on experience with MECM/SCCM and/or Intune, Windows Server, Active Directory, Group Policy, virtualization (e.g., VMware, Hyper-V), and PowerShell scripting.
Experience developing engineering documentation (requirements, designs, test plans, change packages) and executing changes through formal Change Management.
Experience applying DISA STIGs, working with ACAS/Nessus results, and supporting RMF control implementation and evidence collection.
Understanding of IP networking, VDI, and endpoint security concepts sufficient to design and troubleshoot integrated solutions.
Strong analytical, technical writing, and communication skills; ability to participate in an after-hours on-call rotation.

Nice To Haves

CompTIA Security+ CE, CySA+, or CASP+ CE; Microsoft 365 Certified: Endpoint Administrator Associate; VMware VCP.
Experience supporting Department of War (DoW), DoD, or Intelligence Community environments across NIPRNet, SIPRNet, and JWICS enclaves.
Experience building lab, pre-production, or digital twin environments for change validation and network modeling.
Experience integrating AI/ML, RPA, or predictive analytics into IT operations, and familiarity with ServiceNow integrations and APIs.
Familiarity with DoD Zero Trust Reference Architecture, DoDAF, and DoD ICAM Strategy.
Experience with eMASS and RMF documentation.
ITIL 4 Foundation certification.

Responsibilities

Analyze application installers, dependencies, configuration requirements, and security constraints to engineer silent, repeatable, STIG-compliant deployment packages (MSI/MSIX/App-V/Intune Win32, PowerShell wrappers) for MECM/SCCM and Intune.
Design and execute package testing in pre-production and the Digital Twin environment (install, upgrade, uninstall, coexistence, user acceptance) and document test evidence for Change Management.
Maintain the enterprise application catalog and packaging standards, manage application versions and end-of-life removals, and support software license reconciliation and vulnerability remediation for third-party applications.
Analyze deployment results and application-related incidents escalated from Tier II to determine root cause and remediate packaging defects.
Design, engineer, test, and implement endpoint infrastructure solutions including hardened image pipelines, automated provisioning, configuration baselines, endpoint management platform enhancements, and VDI integration across multiple security enclaves.
Support the evaluation and phased implementation of a Digital Twin capability for network and system modeling, including building and maintaining the pre-production replica, defining test procedures, and validating significant changes before production deployment.
Develop engineering artifacts for Government approval: requirements, design documents, test plans and results, implementation and rollback plans, change packages, and as-built documentation.
Engineer and integrate automation, AI/ML, and analytics capabilities (e.g., predictive analytics on service data, automated remediation, ServiceNow integrations) that improve support across all tiers, upon Government approval.