Workstation Endpoint Engineer II

A-TEK Inc.•Rockville, MD

5d•$60,000 - $70,000•Onsite

About The Position

Empower, Innovate, Impact! At Team A-TEK, we EMPOWER people to drive INNOVATION that IMPACTS mission! A-TEK operates at the intersection of mission and innovation by applying our deep domain expertise across the federal markets. Embracing our digital-first strategy, A-TEK provides enhanced capabilities in application development, digital transformation, enterprise IT, and scientific services. Our solutions are designed to modernize, automate, secure, protect, and enhance the operations of our federal clients, ensuring they stay ahead in a rapidly evolving digital landscape. Our work is fueled by a passion to serve our clients’ needs and to protect the safety and welfare of Americans. That passion shapes how we nurture our most valuable asset – Our Employees. A-TEK actively cultivates the talent that drives our success and fosters a creative, challenging, and mission-driven work environment for current and future employees. A-TEK is seeking a motivated Workstation Endpoint Engineer II to support our Federal Customer in Montgomery, MD. The Workstation Endpoint Engineer II is responsible for the design, deployment, security, and continuous management of the enterprise workstation environment. This mid-level role focuses on optimizing operating system deployments, automating software delivery, and ensuring strict endpoint compliance across all physical and virtual workstations. The ideal candidate will bridge the gap between day-to-day endpoint troubleshooting and strategic infrastructure engineering, leveraging modern mobile device management (MDM) platforms to support a secure and distributed workforce. Ability to obtain and retain a public trust level clearance is required for consideration. This position is on-site in Rockville, MD

Requirements

3–5 years of dedicated experience in enterprise desktop engineering, systems administration, or unified endpoint management.
Hands-on administration experience with Microsoft Intune, SCCM, or Jamf Pro.
Demonstrated proficiency with PowerShell for automation and environment configuration.
Familiarity with federal hardening guidelines, such as NIST standards, STIG compliance, or CIS benchmarks.
Bachelor’s degree in a relevant field or equivalent technical certifications (e.g., Microsoft Certified: Endpoint Administrator Associate).
Ability to obtain and retain a public trust level clearance is required.

Nice To Haves

Experience managing virtualized environments (e.g., Azure Virtual Desktop, VMware Horizon).
Prior experience supporting federal agencies (such as the NIH or FDA) under formal project management structures.

Responsibilities

Administer and optimize unified endpoint management tools like Microsoft Intune or SCCM/MECM to manage Windows and macOS devices.
Develop, test, and maintain enterprise operating system images and modern provisioning profiles (e.g., Windows Autopilot).
Write and maintain PowerShell or Bash scripts to automate routine deployment tasks, application packaging, and configuration changes.
Implement and enforce endpoint security policies, including patch management, antivirus definitions, encryption settings (BitLocker/FileVault), and vulnerability remediation.
Monitor endpoint health, manage software license distributions, and ensure hardware asset lifecycles align with configuration management data.
Act as the escalation point for complex technical issues relating to workstation performance, network connectivity, and core business software.