Endpoint Systems Management Engineer

Leidos•Fort Meade, MD

2d•Hybrid

About The Position

The Endpoint Systems Management Engineer will work as a member of the Vulnerability Management Team and to support security, patching, availability, administration, operations and maintenance for a Department of War Agency. The Endpoint Systems Management Engineer will receive on the job and formal training and will be required have significant expertise in multiple system administration areas including MCEM, Windows, and scripting. This is viewed as a critical role within the team and will contribute substantially to the team’s success.

Requirements

Bachelor's degree with a minimum of 4 years of relevant experience, Master’s degree with a minimum 2 years, Associate’s with a minimum 6 years of related experience or High School Diploma with a minimum 8 years of related experience can be used in lieu of Bachelor’s degree. OR Bachelor's degree with a minimum of 8 years of relevant experience, Master’s degree with a minimum 6 years, Associate’s with a minimum 10 years of related experience or High School Diploma with a minimum 8 years of related experience can be used in lieu of Bachelor’s degree.
Experience with the development of PowerShell, Bash, or other scripting languages.
Experience with MECM/SCCM
Positive attitude and high-energy approach to IT support.
Desire to learn, work, and grow in a team environment.
Excellent oral and written communication skills, with a proactive attitude toward ensuring all stakeholders are aware of patching activities and changes.
Familiarity with Windows server operating systems in physical and virtual environments.
Security + or equivalent certification
Must have US Citizenship
Must have an active Interim Secret or Secret clearance or be able to obtain an Interim Secret clearance.

Nice To Haves

Experience with M365 and Microsoft Intune
Experience with PowerShell, Bash or other scripting languages.
IT Operations-related technical certifications (A+, Net+, Sec+, MTA, etc.)

Responsibilities

Provide full administration and ownership of the MECM (SCCM) environment, including management of a consolidated single-site hierarchy following CAS and secondary site decommissioning
Manage a distributed endpoint environment across ~30 remote sites, including oversight of Management Points (MPs) and Distribution Points (DPs) to ensure efficient content delivery and system performance
Oversee endpoint lifecycle management, including: Operating system deployment (OSD) and imaging solutions for decentralized site-based imaging, Application packaging, deployment, and maintenance
Lead enterprise patch management operations, including: Server and workstation patching, WSUS administration and software update deployment, Compliance monitoring and remediation
Administer and support enterprise application management, including third-party platforms such as Adobe and Autodesk
Perform Active Directory engineering and support, including: Group Policy design and management for servers and workstations, Certificate Services and PKI administration
Support infrastructure engineering and modernization efforts, including: Server builds, upgrades, and OS migrations (Windows Server 2016 → 2019 → 2025), Deployment of new Distribution Points and infrastructure components, Implementation of security controls such as Secure Boot
Build and maintain systems aligned with DoD/DWIA or secure environment requirements
Support and integrate Microsoft 365 and Intune, including: Application deployment, Configuration policies
Endpoint management modernization initiatives
Collaborate with infrastructure teams supporting virtualized environments (Nutanix hypervisor)