ENDPOINT ENGINEER – SME
About The Position
Empower AI is seeking an Endpoint Engineer - SME to engineer and sustain endpoint systems and infrastructure for a Department of War agency across NIPRNet, SIPRNet, and JWICS enclaves, where available. The role manages Windows and Mac endpoint systems, including Windows 11+, MCEM/SCCM, Active Directory, AWS, macOS, iOS, and Jamf, while applying enclave-specific security, automation, hardening, and RMF compliance practices. The position operates classified-enclave endpoint management infrastructure, engineers hardened images and Group Policy baselines, executes patching within enclave constraints, supports classified VDI and cross-domain considerations, and produces RMF evidence. It is a TS/SCI privileged-user role and the Tier III escalation point for classified endpoint incidents. This is a salaried, FLSA-exempt position requiring independent analysis, discretion, and judgment on matters significant to the program and its customers. The role leads the engineering design, implementation, and lifecycle of enterprise endpoint infrastructure, including image pipelines, automated provisioning, endpoint management architecture, configuration baselines, and VDI integration across enclaves. It also leads evaluation and phased implementation of a Digital Twin capability, establishes test-before-deploy practices, and leads Government-approved AI, automation, and analytics initiatives. The engineer conducts market research and develops reports and Rough Orders of Magnitude to support Government planning and IT Capability Request analysis. This is an onsite role in Quantico, Virginia (RKB), with up to 10% travel. The position requires an active Top Secret clearance with SCI eligibility to start and the ability to participate in after-hours emergency on-call response.
Requirements
- Bachelor's degree and at least 3 years of related experience; alternatively, a Master's degree with 8 years of related experience, or an additional 4 years of related experience in lieu of a degree. At least 7 years of education/experience overall is required.
- U.S. citizenship.
- Active Top Secret clearance with SCI eligibility, favorably adjudicated T5/T5R, required to start.
- Must be within investigation scope and/or currently enrolled in Continuous Evaluation / Continuous Vetting.
- Current DoD 8570/8140 IAT Level I baseline certification (such as CompTIA A+ CE, Network+ CE, Security+ CE, CCNA-Security, or SSCP) before performing cybersecurity-related duties.
- Ability to work independently, analyze problems, determine appropriate courses of action, and exercise discretion and independent judgment with limited day-to-day supervision.
- At least 5 years of systems or infrastructure engineering experience in enterprise Windows (Windows 10+, MCEM/SCCM, AD, AWS) and Mac OS (macOS/iOS/Jamf and/or Mac architecture) environments.
- Experience designing and leading implementation of lab, pre-production, or digital twin environments and formal test-before-deploy practices.
- Experience leading proof-of-concept evaluations, market research, and cost-benefit/Rough Order of Magnitude development for Government or enterprise decision-makers.
- Extensive experience with DISA STIGs, ACAS/Nessus, RMF control implementation, POA&Ms, and eMASS.
- Experience leading engineering teams, establishing standards, and executing changes through formal Change Management.
- Excellent technical writing, briefing, and stakeholder communication skills.
- Ability to participate in after-hours emergency on-call response.
- Experience working on NIPRNet, SIPRNet, and/or JWICS enclaves and with classified media handling procedures.
Nice To Haves
- CISSP, CASP+ CE, or GCED certification.
- AWS or Azure architect certification.
- Experience supporting Department of War, DoD, or Intelligence Community environments across NIPRNet, SIPRNet, and JWICS enclaves.
- Experience applying AI/ML, RPA, or AIOps to IT service management and endpoint operations, including ServiceNow integrations.
- Familiarity with DoD Zero Trust Strategy and Reference Architecture, DoDAF 2.02, DoD ICAM Strategy, and Technology Business Management (TBM).
- ITIL 4 Foundation or Managing Professional certification.
- PMP certification.
- Experience supporting IT Capability Request analysis and governance briefings.
Responsibilities
- Engineer, operate, and maintain endpoint systems and management infrastructure across NIPRNet, SIPRNet, and JWICS, including Windows, macOS/iOS, Jamf, imaging, provisioning, and Group Policy.
- Plan and execute CAT I/II/III patching and software deployments on classified enclaves, managing media transfer and disconnected or air-gapped update workflows as required.
- Engineer and validate hardened images and configuration baselines against DISA STIGs and enclave authority requirements; provide RMF control evidence and POA&M inputs in eMASS.
- Serve as the Tier III escalation point for classified-enclave endpoint incidents and coordinate with enclave network, cybersecurity, and communications teams.
- Lead design, implementation, and lifecycle management of enterprise endpoint infrastructure, including hardened image pipelines, automated provisioning, endpoint management platform architecture, configuration baselines, and VDI integration across enclaves.
- Lead evaluation, cost-benefit analysis, and phased implementation of a Digital Twin capability; author the Digital Twin Evaluation and Implementation Plan and establish testing of significant changes in the digital replica before deployment.
- Lead Government-approved AI, automation, and analytics initiatives, including predictive analytics, intelligent automation across support tiers, and integrations with the ITSM platform; deliver Proof of Concept Reports.
- Conduct market research and prepare Market Research Reports and Rough Orders of Magnitude for emerging technologies and proposed solutions to support Government planning and IT Capability Request analysis.
- Lead engineering teams, establish standards, and execute changes through formal Change Management.
- Participate in after-hours emergency on-call response as needed.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
