Endpoint Engineer, Lead

Booz Allen Hamilton•McLean, VA

10d

About The Position

Endpoint Engineer, Lead Key Role: Support and secure enterprise endpoints across Windows, macOS, Mobile, and Linux environments, ensure devices remain compliant, and optimize for performance. Deliver expertise in endpoint security controls, vulnerability mitigation, and application management, and collaborate with cross-functional teams to strengthen the overall security posture. Implement and maintain endpoint security solutions, including application control, next-generation antivirus, privilege management, and vulnerability remediation. Develop and enforce policies for device compliance and secure configurations. Monitor endpoint and client health, investigate incidents, and provide timely resolution. Collaborate with security and infrastructure teams to align endpoint strategy with organizational goals. Document processes, configurations, and standards to ensure consistency and audit readiness. Due to the nature of work performed within this facility, U.S. citizenship is required.

Requirements

Experience with Windows, macOS, Mobile Linux and scripting languages
Knowledge of endpoint security practices, including application control, Antivirus (AV) or Endpoint Detection and Response (EDR) , patching, privilege management, Conditional Access and vulnerability mitigation
Knowledge of enterprise management tools, such as Intune, SCCM, or Jamf Pro
Knowledge of network security fundamentals and integration with endpoint protection
Knowledge of troubleshooting
Bachelor’s degree
CISSP, CEH, or CompTIA Security+ Certification
U.S. citizenship is required

Nice To Haves

Experience with Microsoft Entra and Active Directory
Experience with Privilege Management tools, such as BeyondTrust
Experience with Application Control tools, such as Airlock
Experience with Next-Gen AV, DLP, and EDR, such as CrowdStrike or Trellix
Experience with patching Operating Systems and Applications
Knowledge of Conditional Access policies and rules
Knowledge of ServiceNow and Microsoft Teams for project management and tracking
Possession of strong analytical and communication skills

Responsibilities

Support and secure enterprise endpoints across Windows, macOS, Mobile, and Linux environments
Ensure devices remain compliant
Optimize for performance
Deliver expertise in endpoint security controls, vulnerability mitigation, and application management
Collaborate with cross-functional teams to strengthen the overall security posture
Implement and maintain endpoint security solutions, including application control, next-generation antivirus, privilege management, and vulnerability remediation
Develop and enforce policies for device compliance and secure configurations
Monitor endpoint and client health, investigate incidents, and provide timely resolution
Collaborate with security and infrastructure teams to align endpoint strategy with organizational goals
Document processes, configurations, and standards to ensure consistency and audit readiness