Endpoint Security Specialist (Secret Cleared)

RIVA Solutions Inc.•Boulder, CO

21h•Onsite

About The Position

RIVA Solutions is seeking an Endpoint Specialist (Windows & Mac) to support enterprise endpoint security and lifecycle management under the NTIA ISCOM contract. This role is responsible for managing and securing Windows and Macintosh laptop endpoints across the enterprise, ensuring proper configuration, patch management, operating system updates, and compliance with federal cybersecurity standards. The ideal candidate will bring hands-on experience administering macOS and Windows devices in a secure enterprise environment, with strong familiarity in mobile device management, enterprise patching, endpoint compliance, and cross-functional coordination with cybersecurity teams. This role is well suited for a technical professional who is detail-oriented, operationally strong, and committed to maintaining secure and reliable endpoint services.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent combination of education and relevant experience
Minimum of 5 years of IT or endpoint administration experience
U.S. Citizenship required with an active Secret clearance
Foundational experience managing macOS and Windows devices in an enterprise or federal environment
Familiarity with BigFix and macOS MDM frameworks such as JAMF and Intune
Knowledge of scripting languages such as PowerShell or Bash for automation and remediation tasks
Understanding of system patching, software distribution, and compliance reporting
Strong communication skills, attention to detail, and commitment to maintaining secure and reliable endpoint operations

Nice To Haves

CompTIA certifications such as A+, Network+, Security+, or AZ-900
Microsoft or IBM certifications related to BigFix administration
Apple Certified Support Professional (ACSP) or equivalent macOS certification
Experience managing Apple Business Manager and automated MDM enrollment workflows
Familiarity with Active Directory, Azure AD, Microsoft Intune, and identity management for cross-platform devices
Experience with endpoint detection and response (EDR) tools and vulnerability management practices
Experience working within a federal or enterprise IT environment with stringent security compliance requirements
Experience with imaging deployment and Windows Autopilot

Responsibilities

Manage and secure Windows and Macintosh laptop endpoints, including system configuration, baseline enforcement, patch deployment, and lifecycle management
Implement and maintain Mobile Device Management (MDM) solutions to enforce endpoint security policies and compliance controls across macOS and Windows environments
Administer and secure Macintosh devices using JAMF Pro, including device enrollment, configuration profiles, software distribution, and compliance monitoring
Utilize enterprise patch management tools, including BigFix and related technologies, to ensure timely deployment of operating system and third-party application updates
Oversee endpoint configuration standards and ensure alignment with federal security requirements and organizational hardening guidelines
Monitor endpoint health, patch compliance, and vulnerability remediation through reporting dashboards and security tools
Collaborate directly with cybersecurity teams to ensure endpoint security controls, EDR tools, and patching strategies align with NTIA’s broader security posture and compliance framework
Support implementation and enforcement of endpoint security baselines, including encryption, access controls, MFA integration, and device policy enforcement
Troubleshoot and resolve issues related to device enrollment, patch failures, configuration drift, and security policy enforcement
Maintain documentation, SOPs, and reporting artifacts to support audits, compliance reviews, and operational transparency
Provide professional and timely support to NTIA users while maintaining secure and reliable endpoint operations