Endpoint Systems Engineer

ECS Federal•Fairfax, VA

4d•Hybrid

About The Position

Everforth ECS is seeking an Endpoint Systems Engineer to support its internal Corporate IT team. This hybrid position is based in Fairfax, Virginia, and requires working onsite with the team three days per week. The engineer will manage endpoint lifecycle activities across macOS, Windows, Linux, and mobile devices, emphasizing automation, patch compliance, configuration management, security hardening, and vulnerability remediation. The role also supports endpoint reliability, user experience, and compliance, and includes advising stakeholders and training End-User Support Technicians.

Requirements

U.S. citizenship.
Ability to obtain and maintain a DoD Secret clearance.
Three or more years of experience in endpoint management, systems administration, desktop engineering, or a closely related role.
Experience managing endpoint fleets through MDM, unified endpoint management, or similar tools.
Experience supporting macOS, Windows, Linux, and mobile operating environments.
Familiarity with endpoint patching, configuration management, security baselines, and vulnerability remediation.
Ability to work independently as a sole contributor while providing sound recommendations on policies, procedures, and technical solutions.
Working knowledge of ITSM best practices, including documentation, change management, incident response, and problem management.
Current knowledge of common MDM and endpoint-management platforms and evolving industry practices.
Ability to communicate effectively with technical and non-technical stakeholders and train End-User Support Technicians.

Nice To Haves

Experience with one or more endpoint-management platforms, such as Jamf, Workspace ONE UEM, Microsoft Intune, Microsoft Configuration Manager/SCCM, NinjaOne, or similar tools.

Responsibilities

Administer, patch, and maintain macOS, Windows, Linux, and mobile-device environments using MDM, endpoint-management, and configuration-management tools.
Deploy operating-system, application, and security updates; monitor patch compliance; and remediate systems that fall outside established standards.
Develop, apply, and maintain endpoint configuration baselines, policies, profiles, and scripts across supported platforms.
Harden endpoints using configuration profiles, system policies, and automation in alignment with applicable standards and frameworks, including CIS Benchmarks, NIST STIGs, and CMMC requirements.
Support Linux system administration, including package management, patching, baseline configuration, security hardening, and automation.
Identify, investigate, and remediate endpoint vulnerabilities involving applications, operating systems, insecure configurations, and missing patches.
Partner with security, infrastructure, and end-user support teams to improve endpoint reliability, user experience, and compliance posture.
Create and maintain technical documentation, standard operating procedures, and knowledge-base articles.
Advise leadership and technical stakeholders on endpoint-management policies, procedures, and improvement opportunities.
Train and support End-User Support Technicians on MDM and endpoint-management tools and processes.
Follow ITSM practices for documentation, change management, incident response, problem management, and service delivery.