Endpoint Engineer (TS Clearance or Public Trust Required) in Washington, DC

Required Qualifications
Top Secret (TS) or Public Trust Security Clearance.

• Minimum 8 years of experience in Information Technology, Endpoint Engineering, or Cybersecurity.
• Minimum 6 years of hands-on engineering experience in enterprise environments.
• Experience working within formal change management, audit, compliance, and security governance processes.
• Strong verbal and written communication skills with the ability to interact with senior executives.
• Ability to meet critical project deadlines.

Required Technical Skills

• Endpoint Engineering
• Windows and macOS workstation imaging, deployment, and lifecycle management.
• Experience creating, maintaining, validating, and securing workstation images.
• Integration of endpoint images with VDI, EDR, authentication, and logging solutions.
• Device Management & Identity
• Microsoft Intune administration and compliance management.
• Windows Autopilot deployment and provisioning.
• JAMF Pro administration for macOS endpoint management.
• Device enrollment, provisioning, asset management, and lifecycle operations.
• Passwordless authentication and hardware-backed credential implementation (YubiKey, CAC, security keys).
• Patch & Configuration Management
• Hands-on experience with Ivanti and/or KACE.
• Operating system and application patching.
• Configuration management and remediation of configuration drift.
• Patch validation, deployment monitoring, and rollback support.
• Monitoring & Security Operations
• Endpoint logging and telemetry engineering.
• Windows Event Logs and macOS Unified Logs.
• SIEM/EDR integration and monitoring.
• Experience with Microsoft Sentinel or similar security platforms.
• Security monitoring, audit readiness, and forensic support.
• Automation & Infrastructure
• Endpoint deployment automation and scripting.
• Image deployment and patch orchestration automation.
• Documentation of engineering procedures, runbooks, and operational processes.