Endpoint Engineer (Journeyman)

DecisionPoint | Cortek•Chicago, IL

3d•Remote

About The Position

DecisionPoint seeks an Endpoint Engineer to develop, maintain, deploy, and support standardized endpoint capabilities for the USMEPCOM ENLIST program. The role supports endpoint images, application packaging, device provisioning, software deployment, patching, configuration baselines, and Virtual Desktop Infrastructure (VDI). It supports physical and virtual endpoints throughout their lifecycle, including testing, deployment, configuration, patching, troubleshooting, refresh, recovery, and retirement. The engineer works with the Senior Endpoint Engineer and other technical teams to provide secure, consistent, supportable endpoint services across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP locations, and remote-user environments. The role maintains a defined division of responsibility with Task 6 cybersecurity personnel. Task 6 identifies, prioritizes, and validates security findings; the Endpoint Engineer evaluates assigned findings, tests approved corrections, implements operational changes through established change-control procedures, and provides deployment evidence for cybersecurity validation. The position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, incident response, on-site support, or travel may be required. Applicants acknowledge and consent to having their resumes included in an active competitive government contract bid.

Requirements

Active Secret clearance or higher.
Bachelor’s degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category.
At least six years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related technical discipline.
Experience developing or maintaining enterprise endpoint images.
Experience developing, testing, and deploying application packages.
Experience supporting endpoint provisioning, deployment, patching, configuration, and lifecycle management.
Experience engineering or supporting Virtual Desktop Infrastructure.
Experience implementing assigned endpoint-security or vulnerability-remediation changes.
Experience troubleshooting complex endpoint, packaging, deployment, patching, or VDI issues.
Knowledge of controlled testing, pilot deployment, phased implementation, validation, rollback, and change-management practices.
Ability to maintain image documentation, software-package records, test plans, deployment plans, rollback procedures, and completion evidence.
Microsoft 365 Certified: Endpoint Administrator Associate certification when relevant to the assigned Microsoft 365 or Intune environment.
Ability to support after-hours maintenance, deployment windows, critical incidents, and endpoint recovery when required.
Strong written, verbal, analytical, and technical problem-solving skills.

Nice To Haves

Experience with Microsoft Intune or Microsoft Endpoint Manager.
Experience with Microsoft Configuration Manager or System Center Configuration Manager.
Experience with Windows Autopilot and modern device provisioning.
Experience with Microsoft Defender for Endpoint.
Experience with Microsoft Entra ID and hybrid endpoint management.
Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.
Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.
Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.
Experience supporting federal or Department of Defense endpoint environments.
Experience applying DISA Security Technical Implementation Guides to Windows endpoints.
Experience supporting Risk Management Framework controls, vulnerability remediation, or authorization evidence.
Experience with endpoint analytics, compliance, configuration-management, or digital employee-experience tools.
Experience supporting large-scale operating-system migrations, device refreshes, or endpoint-management modernization.
CompTIA Security+ or another relevant security certification.
ITIL v4 Foundation certification.
Relevant Microsoft, VMware, Citrix, cloud, automation, or endpoint-management certification.

Responsibilities

Develop, test, maintain, document, and validate standardized endpoint images, including image components, operating-system settings, drivers, firmware dependencies, security baselines, required software, and deployment configurations.
Support image versioning, testing, approval, release, rollback, and retirement processes; validate images for functionality, compatibility, security, performance, and operational readiness.
Develop and maintain automated device-deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles.
Support endpoint deployment using approved Microsoft and Government management platforms, including administration of approved capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies.
Develop, test, maintain, and deploy application packages for commercial, Government, and internally developed software using approved formats and standards.
Develop application installation, detection, dependency, requirement, upgrade, repair, and removal logic; test packages for silent installation, accurate detection, compatibility, security, and clean removal.
Troubleshoot package failures, dependencies, application conflicts, detection errors, and deployment issues.
Develop approved scripts and automation for provisioning, packaging, configuration, deployment, validation, and remediation; maintain scripts and configurations in approved documentation and version-control repositories.
Support patching of endpoint operating systems, applications, drivers, firmware, and management components.
Configure and maintain pilot groups, deployment rings, production waves, maintenance windows, deadlines, and exception processes; test updates and patches before production deployment.
Monitor patch and deployment progress, failure rates, compliance status, endpoint health, and approved exceptions; investigate failed patches and coordinate corrective actions, redeployment, rollback, or exception documentation.
Engineer and support VDI capabilities, including base images, desktop pools, application delivery, user-profile configurations, and endpoint-access policies.
Troubleshoot VDI login, profile, application, display, performance, peripheral, and connectivity problems; support VDI refreshes, upgrades, capacity activities, deployment, testing, and optimization.
Coordinate VDI dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.
Support endpoint deployment and refresh projects across geographically dispersed USMEPCOM locations, including provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement.
Support operating-system upgrades, application migrations, technology refreshes, and endpoint-management transitions.
Provide advanced engineering support for complex endpoint, image, application-packaging, deployment, patching, and VDI incidents; analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence.
Support root-cause analysis and implement approved corrective actions for recurring endpoint incidents; assist with major incidents and outages and implement approved workarounds and restoration actions.
Coordinate with Service Desk and field-support teams to improve troubleshooting, escalation, and knowledge content; develop technical guidance for common endpoint, packaging, deployment, patching, and VDI problems.
Review cybersecurity findings assigned to endpoint operations by Task 6; assess operational impact, dependencies, testing, deployment, and rollback requirements.
Test and implement approved endpoint security changes through established change and release procedures, including remediation involving images, software versions, patches, configurations, policies, or management settings.
Track affected endpoint populations, deployment status, failures, exceptions, and completion results; provide remediation and completion evidence to Task 6 for validation.
Coordinate unresolved remediation issues with cybersecurity personnel, vendors, system owners, and Government stakeholders.
Apply approved endpoint-security baselines and DISA Security Technical Implementation Guides; support endpoint compliance reporting, configuration validation, vulnerability remediation, and audit-evidence collection.
Maintain endpoint inventories, deployment records, image documentation, software-package records, patch status, VDI records, and configuration baselines.
Develop and maintain standard operating procedures, packaging instructions, test plans, deployment plans, rollback procedures, and recovery documentation.
Follow approved incident, problem, change, release, configuration, asset, security, and quality-management processes.
Provide endpoint health, deployment, patching, compliance, risk, and issue information for program reporting.