Microsoft Endpoint Platform Lead

Essnova Solutions • Bethesda, MD

1d • Hybrid

About The Position

Microsoft Endpoint Platform Lead Job Code: MSDEF2 Location: Bethesda/Rockville, MD / Hybrid-Telework Eligible Employment: Full-Time Status: Contingent Upon Proposal Award About Essnova Essnova Solutions, Inc. is seeking an experienced Microsoft Endpoint Platform Lead to lead enterprise endpoint-management delivery supporting a large-scale Microsoft endpoint management and cybersecurity modernization program for the National Institutes of Health (NIH). This position is contingent upon Essnova receiving contract award. The Microsoft Endpoint Platform Lead will lead technical delivery and governance across Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), MECM/Intune co-management, Azure Arc alignment, and JAMF/macOS support across an enterprise environment of approximately 55,000 endpoints and 15,000+ servers.

Requirements

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering, or a related technical discipline.
• 8+ years of enterprise endpoint-management experience.
• 5+ years of hands-on experience with Microsoft Intune and MECM/SCCM.
• Demonstrated hands-on experience with: Microsoft Intune
• Microsoft Endpoint Configuration Manager (MECM/SCCM)
• MECM/Intune co-management
• Intune enrollment and device onboarding
• Device compliance and policy configuration
• Configuration and security baselines
• Endpoint migrations
• Exception management
• Enterprise endpoint governance and reporting
• Experience supporting large-scale enterprise device populations and complex, multi-organization operating environments.
• Demonstrated experience creating technical baselines, operating procedures, implementation evidence, reports, dashboards, and knowledge-transfer materials.
• Experience supporting enterprise endpoint migrations, centralized management initiatives, and transition into steady-state operations.

Nice To Haves

• Experience supporting NIH, HHS, or another civilian federal health/science agency.
• Experience with Azure Arc, Microsoft Entra, Conditional Access, and device signals.
• Experience with JAMF and macOS endpoint management/governance.
• Experience with automation, scripting, systems integration, and application packaging.
• Experience supporting federal authorization/ATO processes, NIST control evidence, security assessments, audits, and compliance requirements.
• Experience producing Section 508-compliant deliverables.
• Microsoft 365 Certified: Endpoint Administrator Associate or a current equivalent Microsoft certification.
• Demonstrated experience achieving measurable improvements in endpoint enrollment, device compliance, migration completion, baseline implementation, exception reduction, or operational transition.

Responsibilities

• Lead enterprise endpoint-management governance across Windows, macOS, and other approved endpoint populations.
• Lead Microsoft Intune and MECM/SCCM co-management, cloud-native Intune configuration, migration, onboarding, and centralized endpoint-management activities.
• Implement, maintain, troubleshoot, and document approved configuration baselines, security baselines, compliance settings, operational standards, and exceptions.
• Support enterprise Intune enrollment, device compliance, policy configuration, migrations, and endpoint-management reporting.
• Coordinate JAMF/macOS governance, centralization planning, baseline documentation, onboarding evidence, and authorization support.
• Support integration and dependencies involving Azure Arc, Microsoft Entra, Conditional Access, and device signals.
• Provide systems integration, application-packaging standardization, automation, scripting, and technical troubleshooting.
• Develop and maintain endpoint governance artifacts, technical baselines, SOPs, operational documentation, dashboards, reports, implementation evidence, and knowledge-transfer materials.
• Monitor and report endpoint enrollment, compliance, migrations, baselines, exceptions, risks, dependencies, and operational trends.
• Support ATO, ATU, SSP, security assessments, audits, and compliance evidence for endpoint-management capabilities.
• Support applicable federal security and compliance requirements, including NIST control evidence and Section 508-compliant deliverables.
• Support transition of NIH endpoint-management capabilities from modernization and migration activities into steady-state enterprise operations.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior