Endpoint Engineer (Senior)

Computer World Services•North Chicago, IL

2d•$125,000 - $155,000•Remote

About The Position

Computer World Services, Corp. (CWS) is hiring a Senior Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities for the USMEPCOM ENLIST program. The position covers endpoint images, application packaging, device provisioning, software deployment, patching, configuration baselines, and Virtual Desktop Infrastructure (VDI). The engineer supports physical and virtual endpoints throughout their lifecycle at USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP locations, and for remote users. The role maintains a clear division of responsibility with cybersecurity personnel: cybersecurity staff identify, prioritize, and validate findings, while the Endpoint Engineer tests and implements approved changes through change control and provides deployment evidence for validation. The engineer also provides advanced endpoint engineering support, maintains related technical records and procedures, and contributes endpoint health and compliance information to program reporting. This is a remote position, with Chicago, Illinois-area candidates preferred. Occasional after-hours maintenance or deployment windows, critical incident support, on-site work, or travel may be required. The position requires an active Secret clearance or higher. The contract start date is March 1, 2027, and the stated period of performance is March 1, 2027 through February 28, 2033. Applicants acknowledge and consent to having their resume included in an active competitive Government contract bid. The salary range is $125,000–$155,000 per year. The offered rate depends on the selected candidate’s knowledge, skills, abilities, and experience, with consideration for internal parity.

Requirements

Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category.
At least eight years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related discipline.
Experience designing and maintaining enterprise endpoint images and developing, testing, and deploying application packages.
Experience supporting endpoint provisioning, deployment, patching, configuration, lifecycle management, and VDI.
Experience implementing endpoint-security or vulnerability-remediation changes using controlled testing, phased deployment, validation, and rollback practices.
Strong written, verbal, analytical, and technical problem-solving skills.
Active Secret clearance or higher.
Microsoft 365 Certified: Endpoint Administrator Associate, when relevant to the assigned Microsoft 365 or Intune environment.

Nice To Haves

Experience with Microsoft Intune, Configuration Manager, Windows Autopilot, Defender for Endpoint, and Entra ID hybrid endpoint management.
Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.
Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.
Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.
Experience supporting federal or DoD endpoint environments, including DISA STIGs and RMF remediation evidence.
Experience supporting large-scale operating-system migrations, device refreshes, or endpoint-management modernization.
CompTIA Security+ or another security certification, ITIL 4 Foundation, or relevant Microsoft, VMware, Citrix, cloud, or automation certification.

Responsibilities

Serve as the senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.
Design, build, test, and maintain standardized endpoint images, including drivers, operating-system settings, security baselines, and required software; establish image versioning, release, rollback, and retirement procedures.
Develop automated deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles using Microsoft Intune, Configuration Manager, Windows Autopilot, or comparable platforms.
Package commercial, Government, and internally developed software with installation, detection, dependency, upgrade, and removal logic; test and troubleshoot package deployments.
Develop and maintain approved scripts and automation for provisioning, packaging, configuration, and remediation in version-control repositories.
Design and administer endpoint patching for operating systems, applications, drivers, and firmware; establish pilot groups, deployment rings, maintenance windows, and exception processes; test updates and monitor compliance.
Engineer and support VDI base images, desktop pools, application delivery, and user profiles; troubleshoot login, profile, performance, and connectivity issues; coordinate dependencies with virtualization, storage, network, and identity teams.
Support endpoint deployment and refresh projects, operating-system upgrades, application migrations, and endpoint-management transitions; develop technical implementation plans.
Provide Tier 3/Tier 4 engineering support for complex endpoint, packaging, deployment, patching, and VDI incidents, including major incidents and root-cause corrective actions; improve Service Desk and field-support knowledge content.
Review cybersecurity findings assigned to endpoint operations, assess operational impact and rollback needs, implement approved remediation through change and release procedures, and provide completion evidence; apply DISA STIGs and endpoint-security baselines.
Maintain endpoint inventories, image and package records, patch status, VDI documentation, SOPs, and deployment and rollback plans; provide endpoint health and compliance information for program reporting.