Windows Endpoint Engineer, Senior

LCG•Bethesda, MD

3d•Hybrid

About The Position

The Windows Endpoint Engineer, Senior is responsible for managing and maintaining enterprise Windows-based endpoint environments using Ivanti Endpoint Manager (EPM), Microsoft Intune, and IBM BigFix for our NIH client. This role implements patching, application deployment, and system compliance to ensure secure and efficient workstation and laptop operations across the organization. The position serves as a Tier-3 escalation point, providing expert-level troubleshooting, root cause analysis, and advanced technical support for complex endpoint issues. Collaboration with the Client Security Team and Server Team is essential to support imaging, Group Policy management, and server patching initiatives. The ideal candidate possesses strong technical proficiency, hands-on experience with endpoint management platforms, and exceptional problem-solving and communication skills.

Requirements

Bachelor’s degree in Information Technology, Computer Science, or a related field required; equivalent combination of education and relevant experience may be considered.
Minimum of 3–5 years of experience in Windows-based endpoint administration, desktop engineering, or systems management within a medium to large enterprise environment.
3+ years of experience with Ivanti products and solutions.
1+ years of experience with Intune products and solutions
2 – 3+ years of experience with BigFix products and solutions.
CompTIA Security+ (required)
Hands-on experience providing mentorship and training.
Demonstrated expertise in troubleshooting Windows operating systems and executing software patching to ensure system stability and security.
Excellent communication and customer service skills.
Strong problem-solving skills and attention to detail.

Nice To Haves

Microsoft 365 Certified: Endpoint Administrator Associate
Experienced in performing server patching and updates to maintain optimal performance and compliance across environments. (preferred)

Responsibilities

Administer, monitor, and maintain Ivanti Endpoint Manager (EPM), Microsoft Intune, and IBM BigFix to ensure comprehensive management of workstations and laptops across the enterprise.
Monitor system health and performance in Ivanti, Intune, and BigFix.
Track and manage incidents, service requests, and changes using Ivanti Service Manager, with proven ability and experience executing the same functions through Microsoft Intune.
Implement Windows and third-party application patching using Ivanti and Intune, including testing, deployment, and compliance reporting.
Develop and maintain automated patching schedules across all platforms to ensure timely remediation of vulnerabilities and alignment with security policies.
Package and deploy applications via Ivanti, Intune, and BigFix, ensuring consistency and reliability across environments.
Provide assistance to the server team as needed in server image creation and deployment, software package creation and deployment, and server patching.
Collaborate with the Client Security Team on Group Policy Objects (GPOs), user profiles, imaging, and endpoint configurations within Active Directory.
Serve as the final escalation point for complex end-user and Windows endpoint issues, providing Tier-3 technical support with advanced diagnostics, root cause analysis, and expert-level troubleshooting and resolution.
Troubleshoot endpoint connectivity, software deployment, and patching issues across distributed environments.
Maintain accurate and up-to-date documentation for systems, processes, patching procedures, and configuration standards.
Facilitate hands-on training sessions for all staff members on Ivanti and Intune software, ensuring comprehensive understanding and effective usage.