Microsoft SME (Cleared) CBO

Virtual Technologies Group • Metro DC, DC

9d • $130,000 - $175,000 • Onsite

About The Position

The Microsoft SME owns all Windows endpoint management under SMA 3. As the primary practitioner for Microsoft Intune, Windows Autopilot, Entra ID conditional access, GPO, and Windows telemetry, this role is critical to the team's engineering efforts. The individual coordinates with the Apple/macOS SME on cross-platform authentication standards and with the Endpoint Engineer Lead on baseline enforcement.

Requirements

• 8 years of experience in IT, Endpoint Engineering, or Cybersecurity.
• 6 years of engineering experience in enterprise Windows environments.
• U.S. Top Secret Security Clearance Required
• Expert-level Microsoft Intune experience, including device compliance, configuration profiles, security policies, and conditional access.
• Hands-on experience with Windows Autopilot for automated provisioning, device registration, and lifecycle management.
• Experience configuring and enforcing Microsoft Entra ID / Azure AD conditional access policies, hybrid join, and identity governance.
• Group Policy Objects (GPO) proficiency involving policy design, management, and troubleshooting.
• Experience with Windows Event Log collection, filtering, and SIEM/EDR forwarding.
• Knowledge of password less authentication and hardware-backed credentials on Windows, including Windows Hello for Business, FIDO2, YubiKey, and CAC.

Nice To Haves

• Bachelor's degree preferred; waivable.
• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102), which strongly aligns to the scope of the role.
• Microsoft Certified: Identity and Access Administrator Associate (SC-300).
• Microsoft 365 Certified: Administrator Expert.

Responsibilities

• Owns all Windows endpoint management under SMA 3.
• Serves as the primary practitioner for Microsoft Intune, Windows Autopilot, Entra ID conditional access, GPO, and Windows telemetry.
• Coordinates with the Apple/macOS SME on cross-platform authentication standards.
• Coordinates with the Endpoint Engineer Lead on baseline enforcement.

Benefits

• medical insurance plans
• dental insurance
• vision insurance
• health savings accounts (HSA)
• flexible spending accounts (FSA)
• life insurance
• short and long-term disability insurance
• paid time off and holidays
• 401(k) with employer match

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree