Senior Endpoint Migration Engineer

Global Enterprise Services, LLCFort Meade, MD
$110,000 - $125,000Hybrid

About The Position

Unleash your potential at GES, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. We're eager to connect with you regarding transitioning to GES! The GES Digital Modernization Sector has a career opportunity for a Project Manager to join our dynamic DES (Defense Enclave Services) team supporting DISA at Fort Meade, MD on a hybrid basis. PROGRAM SUMMARY: The Defense Enclave Services contract will unify the DoD Fourth Estate Defense Agencies and Field Activities’ (DAFAs) common use information technology systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization program office. It will unify the DAFAs on a common, modernized network architecture, DoDNet, to provide mission services focused on enhanced user experience, improved security, and network reliability. CLEARANCE REQUIREMENT: Must have an ACTIVE SECRET or above clearance required. (US Citizenship required) Job Summary As an Endpoint Engineer you will focus on endpoint designs, deploys, and secure end-user devices (workstations, laptops) using tools like Intune, MCM, SCCM. Ensure proper OS images are deployed to all endpoint devises, test and manage software updates, ensure appropriate and enforce security policies (EDR/AV), and automate workflows to ensure stable, compliant, and efficient computing environments for endpoint migrations.

Requirements

  • BA Degree and 4+ years of experience. Additional experience may be accepted in lieu of degree.
  • Deep knowledge of Microsoft Intune, MECM (SCCM), Active Directory, and Group Policy.
  • 8140 Certification required
  • Familiarity with endpoint security tools

Nice To Haves

  • Jamf

Responsibilities

  • Managing the lifecycle of devices—including imaging, configuration, and decommissioning—using tools like Intune, SCCM/MECM, or Jamf.
  • Designing and enforcing endpoint security baselines, ensuring timely OS and application patching, and managing EDR/AV software.
  • Using PowerShell, Python, or bash to automate software deployment, configuration changes, and compliance remediation.
  • Oversee application rationale and ensure proper preparation for deploying software applications at scale to Windows environments.
  • Acting as an escalation point for complex technical issues relating to endpoints that cannot be resolved by standard IT support.
  • Monitoring device health and security compliance, maintaining documentation, and ensuring adherence to security policies (e.g., NIST, DISA STIGs).
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service