Unified Endpoint Management Engineer

Global Enterprise Services•Fort Meade, MD

About The Position

GES is seeking a Senior Unified Endpoint Management (UEM) Engineer to support the Defense Enclave Services (DES) program, an enterprise-scale digital modernization initiative for DISA and DoD Fourth Estate Agencies. The engineer will lead the design, implementation, and optimization of endpoint management solutions, primarily using Microsoft Intune and cloud-native device management. The role supports migration from MECM and on-premises Active Directory to Azure AD–joined, Intune-managed endpoints, delivering secure, scalable, user-centric, resilient, and compliant solutions in collaboration with engineering, security, and operations teams.

Requirements

Bachelor’s degree with at least 4 years of relevant experience, or a master’s degree with at least 2 years of experience; additional experience may be considered in lieu of a degree.
Active DoD Secret clearance.
Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
Strong proficiency in PowerShell scripting to automate administrative tasks, streamline deployments, and troubleshoot endpoint issues.
Experience working directly with customers, end users, and stakeholders to gather requirements, provide project updates, and deliver technical solutions.
Excellent communication, organizational, analytical, and problem-solving skills, with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
Working knowledge of Atlassian tools, including Jira and Confluence, for project tracking, documentation, and collaboration.
Current DoD 8570 IAT Level II certification, such as Security+ CE or CISSP.

Nice To Haves

Microsoft certifications such as Microsoft Endpoint Administrator Associate or Microsoft 365 Certified: Endpoint Administrator Expert.
Experience with large-scale enterprise migrations to cloud-native endpoint management.
Familiarity with Zero Trust architecture and modern identity and security frameworks.
Experience integrating endpoint management with SIEM/SOC platforms.

Responsibilities

Lead the design, architecture, and deployment of Microsoft Intune solutions aligned with enterprise security, compliance, and user experience requirements.
Drive endpoint modernization, including migration from MECM and traditional AD-joined devices to Azure AD–joined and Intune-managed environments.
Develop and manage Intune compliance policies, configuration profiles, and application deployment strategies.
Package, deploy, and manage application lifecycles in Intune, emphasizing automation, version control, and end-user experience.
Architect and implement Windows 10/11 provisioning and deployment using Intune, Autopilot, Enrollment Status Page (ESP), and modern provisioning techniques.
Configure and optimize Windows Update for Business (WUfB) for secure, reliable, and timely operating system patching.
Collaborate with infrastructure and identity teams to modernize Group Policy Objects (GPOs) as Intune-based controls, including Settings Catalog and ADMX-backed policies.
Partner with Active Directory and MECM/SCCM teams on coexistence strategies and migration readiness.
Integrate Intune with Microsoft 365 services, including Defender for Endpoint and Conditional Access, and support Zero Trust security models.
Implement and enforce endpoint security practices, including encryption, endpoint protection, compliance baselines, and data loss prevention.
Support security operations by monitoring endpoint-related incidents and integrating telemetry with SIEM/SOC workflows.
Identify endpoint management process improvements and drive adoption of modern management capabilities.
Create and maintain technical documentation, including architecture diagrams, configuration standards, and migration strategies.