Endpoint Systems Engineer

ECS Tech Inc•Fairfax, VA

4d•$100,000 - $125,000•Hybrid

About The Position

Everforth ECS is seeking an Endpoint Systems Engineer to support its internal Corporate IT team in a hybrid role based in Fairfax, Virginia. The selected candidate will work onsite with the team three days per week. The role supports macOS, Windows, Linux, and mobile devices, managing endpoint lifecycle activities with an emphasis on automation, patch compliance, configuration management, security hardening, and vulnerability remediation.

Requirements

U.S. citizenship.
Ability to obtain and maintain a DoD Secret clearance.
Three or more years of experience in endpoint management, systems administration, desktop engineering, or a closely related role.
Experience managing endpoint fleets through MDM, unified endpoint management, or similar tools.
Experience supporting macOS, Windows, Linux, and mobile operating environments.
Familiarity with endpoint patching, configuration management, security baselines, and vulnerability remediation.
Ability to work independently as a sole contributor while providing sound recommendations on policies, procedures, and technical solutions.
Working knowledge of ITSM best practices, including documentation, change management, incident response, and problem management.
Current knowledge of common MDM and endpoint-management platforms and evolving industry practices.
Ability to communicate effectively with technical and non-technical stakeholders and train End-User Support Technicians.
Experience with one or more endpoint-management platforms, such as Jamf, Workspace ONE UEM, Microsoft Intune, Microsoft Configuration Manager/SCCM, NinjaOne, or similar tools.

Responsibilities

Administer, patch, and maintain macOS, Windows, Linux, and mobile-device environments using MDM, endpoint-management, and configuration-management tools.
Deploy operating system, application, and security updates; monitor patch compliance; and remediate systems that do not meet established standards.
Develop, apply, and maintain endpoint configuration baselines, policies, profiles, and scripts across supported platforms.
Harden endpoints using configuration profiles, system policies, and automation aligned with applicable standards and frameworks, including CIS Benchmarks, NIST STIGs, and CMMC requirements.
Support Linux system administration, including package management, patching, baseline configuration, security hardening, and automation.
Identify, investigate, and remediate endpoint vulnerabilities involving applications, operating systems, insecure configurations, and missing patches.
Partner with security, infrastructure, and end-user support teams to improve endpoint reliability, user experience, and compliance posture.
Create and maintain technical documentation, standard operating procedures, and knowledge-base articles.
Advise leadership and technical stakeholders on endpoint-management policies, procedures, and improvement opportunities.
Train and support End-User Support Technicians on MDM and endpoint-management tools and processes.
Follow ITSM practices for documentation, change management, incident response, problem management, and service delivery.