Senior Virtualization / Workspace ONE Engineer - Active Secret clearance

PGTEK•Joint Base Andrews, MD

2d•Onsite

About The Position

PGTEK is seeking a Senior Virtualization Engineer to support a Department of Defense customer at Joint Base Andrews, Maryland. The role focuses on the architecture, implementation, administration, and optimization of Omnissa Workspace ONE solutions in a complex, secure enterprise environment. The engineer will manage enterprise mobility and endpoint environments, support secure device deployments, resolve complex technical issues, and provide technical guidance to junior engineers and government personnel. The position is fully onsite and requires an active Secret security clearance. The role covers Workspace ONE UEM, Access, Intelligent Hub, and Tunnel; the lifecycle management of iOS/iPadOS, Android Enterprise, Windows 11, and macOS devices; device enrollment and provisioning integrations; CAC/PIV authentication and PKI; and application of DoD security requirements. The engineer will also integrate Workspace ONE with identity and security services, produce technical and compliance documentation, and support RMF, ATO, ACAS, and CCRI/CORA activities. The position includes mentoring, knowledge transfer, technical briefings, project updates, risk assessments, and recommendations to government leadership and PGTEK program management.

Requirements

Active Secret Security Clearance.
DoD 8140 (formerly DoD 8570) compliant baseline certification at IAT Level II, such as CompTIA Security+ CE or higher.
At least 7 years of enterprise IT experience, including 5+ years administering Omnissa Workspace ONE / VMware AirWatch UEM in an enterprise environment supporting 5,000+ devices.
Extensive experience with enterprise mobile device management, particularly iOS and Android Enterprise.
Working knowledge of modern endpoint management for Windows 11 and macOS.
Hands-on experience implementing and maintaining DISA STIGs in a DoD or federal government environment.
Strong understanding of PKI, certificate-based authentication, and CAC/PIV authentication workflows.
Experience integrating enterprise endpoint management platforms with identity management and security infrastructure.
Strong troubleshooting, analytical, and problem-solving skills.
Excellent written and verbal communication skills, including the ability to brief senior military and civilian leadership.

Nice To Haves

Omnissa or legacy VMware Workspace ONE certifications, such as VCP-DW or Omnissa Certified Professional – UEM.
Experience supporting Workspace ONE in FedRAMP High or DoD Impact Level environments.
Familiarity with NIPRNet and SIPRNet environments.
Experience with Omnissa Horizon (VDI) and Workspace ONE Intelligence.
Previous Air Force, Air Mobility Command, or Joint Base Andrews mission partner experience.
Scripting and automation experience using PowerShell, REST APIs, and/or Python.
Advanced security certifications such as CISSP, CASP+, or equivalent.
Bachelor's degree in Information Technology, Computer Science, or a related discipline; equivalent professional experience may be considered.

Responsibilities

Architect, deploy, configure, and upgrade Omnissa Workspace ONE UEM, Access, Intelligent Hub, and Tunnel across enterprise environments.
Manage the full device lifecycle for iOS/iPadOS, Android Enterprise (including Samsung Knox), Windows 11, and macOS devices, including enrollment, configuration profiles, compliance policies, application management, and device retirement.
Integrate Apple Business Manager and Automated Device Enrollment, Android Zero-Touch Enrollment, and Samsung Knox Mobile Enrollment.
Implement and support CAC/PIV-based authentication, derived credentials including DoD Purebred, and certificate authority integrations.
Apply, configure, and validate DISA STIGs and SRGs across mobile and endpoint platforms.
Develop and maintain technical documentation and compliance evidence for RMF, ATO, ACAS, and CCRI/CORA inspections.
Integrate Workspace ONE with Microsoft Entra ID, Active Directory, LDAP, PKI, SIEM, and Zero Trust security controls.
Troubleshoot and resolve Tier III issues involving endpoint management, authentication, device enrollment, connectivity, and security configurations.
Develop technical runbooks, standard operating procedures, and knowledge articles for ongoing operations and maintenance.
Mentor junior engineers and lead knowledge-transfer sessions for government staff and technical teams.
Provide technical briefings, project updates, risk assessments, and recommendations to government leadership and PGTEK program management.

Benefits

Comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option.
Vision plan.
Dental insurance, with the base dental plan option paid for by PGTEK.
Life insurance premiums covered.
Short- and long-term disability insurance premiums covered.
Critical Illness insurance premiums covered.
Matching 401(k) plan.
Discount on pet insurance through ASPCA Pet Insurance.
Employee Assistance Program at no cost to all employees.
Generous PTO and holidays.
Education Assistance Program available after 12 months of employment.
Relocation assistance available for qualified candidates.
Resources to support completion of professional and business certifications.