Endpoint Engineer

Leidos•Fort Meade, MD

1d•Hybrid

About The Position

The Leidos Digital Modernization Sector has a career opportunity for a Project Manager to join our dynamic DES (Defense Enclave Services) team supporting DISA at Fort Meade, MD on a hybrid basis. PROGRAM SUMMARY: The Defense Enclave Services contract will unify the DoD Fourth Estate Defense Agencies and Field Activities’ (DAFAs) common use information technology systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization program office. It will unify the DAFAs on a common, modernized network architecture, DoDNet, to provide mission services focused on enhanced user experience, improved security, and network reliability. CLEARANCE REQUIREMENT: •Must have an ACTIVE SECRET or above clearance required. (US Citizenship required) Job Summary As an Endpoint Engineer you will focus on endpoint designs, deploys, and secure end-user devices (workstations, laptops) using tools like Intune, MCM, SCCM. Ensure proper OS images are deployed to all endpoint devises, test and manage software updates, ensure appropriate and enforce security policies (EDR/AV), and automate workflows to ensure stable, compliant, and efficient computing environments for endpoint migrations.

Requirements

BA Degree and 4+ years of experience. Additional experience may be accepted in lieu of degree.
Deep knowledge of Microsoft Intune, MECM (SCCM), Active Directory, and Group Policy.
8140 Certification required
Familiarity with endpoint security tools

Responsibilities

Managing the lifecycle of devices—including imaging, configuration, and decommissioning—using tools like Intune, SCCM/MECM, or Jamf.
Designing and enforcing endpoint security baselines, ensuring timely OS and application patching, and managing EDR/AV software.
Using PowerShell, Python, or bash to automate software deployment, configuration changes, and compliance remediation.
Oversee application rationale and ensure proper preparation for deploying software applications at scale to Windows environments.
Acting as an escalation point for complex technical issues relating to endpoints that cannot be resolved by standard IT support.
Monitoring device health and security compliance, maintaining documentation, and ensuring adherence to security policies (e.g., NIST, DISA STIGs).