Endpoint Engineer (Senior)

DecisionPoint Corporation seeks a senior Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities supporting the USMEPCOM ENLIST program. The role owns endpoint imaging, application packaging, deployment, patching, configuration, VDI engineering, and implementation of approved endpoint security changes.

Responsibilities:

• Serve as the senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities
• Design, build, test, maintain, and document standardized endpoint images
• Maintain image components, drivers, firmware dependencies, operating-system settings, security baselines, required software, and deployment configurations
• Establish image versioning, testing, approval, rollback, release, and retirement procedures
• Validate endpoint images against functional, security, performance, compatibility, and operational requirements
• Develop and maintain automated deployment task sequences, provisioning workflows, configuration profiles, and enrollment processes
• Engineer and support endpoint deployment using approved Microsoft and Government management platforms
• Support modern endpoint-management and co-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies
• Develop, test, maintain, and deploy application packages using approved formats and packaging standards
• Package commercial, Government, and internally developed software for controlled endpoint deployment
• Develop installation, detection, dependency, requirement, upgrade, repair, and removal logic for software packages
• Test application packages for silent installation, proper detection, compatibility, security, user experience, and clean removal
• Troubleshoot failed installations, package conflicts, missing dependencies, detection problems, and deployment errors
• Develop approved scripts and automation for packaging, provisioning, configuration, deployment, validation, and remediation
• Maintain endpoint-management automation in approved version-control and documentation repositories
• Design and administer endpoint patching processes for operating systems, approved applications, drivers, firmware, and management components
• Establish deployment rings, pilot groups, production waves, maintenance windows, deadlines, exception handling, and rollback procedures
• Test operating-system updates, security patches, vendor patches, and application updates before production deployment
• Monitor deployment progress, failure rates, compliance status, endpoint health, and outstanding exceptions
• Investigate failed patches and coordinate corrective actions, redeployment, or approved exceptions
• Engineer and support Virtual Desktop Infrastructure capabilities
• Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, policies, and endpoint-access requirements
• Monitor and troubleshoot VDI performance, availability, login, profile, application, display, peripheral, and connectivity issues
• Support VDI modernization, capacity planning, testing, deployment, and optimization
• Coordinate VDI platform dependencies with virtualization, storage, network, identity, application, and cybersecurity teams
• Support enterprise endpoint deployment and refresh projects across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP sites, and remote users
• Develop technical implementation plans for device refreshes, operating-system upgrades, application migrations, and endpoint-management transitions
• Support endpoint provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement
• Provide Tier 3 and Tier 4 engineering support for complex endpoint, application-packaging, deployment, patching, and VDI incidents
• Analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence
• Develop corrective actions for recurring endpoint incidents and known errors
• Support major incidents and outages involving endpoint management, software deployments, VDI, or widespread device failures
• Implement approved workarounds and service-restoration actions during endpoint-related incidents
• Coordinate with the Service Desk and field-support teams to improve endpoint troubleshooting, escalation, and knowledge content
• Create technical guidance for common endpoint, deployment, packaging, and VDI problems
• Review Task 6 cybersecurity findings assigned to endpoint operations
• Assess the operational impact, dependencies, testing requirements, deployment approach, and rollback needs for assigned security changes
• Implement approved endpoint security changes through established change-management and release procedures
• Execute approved remediation involving endpoint images, software versions, patches, configurations, policies, or management settings
• Maintain evidence showing the affected population, deployment method, implementation status, failures, exceptions, and completion results
• Provide remediation evidence to Task 6 for validation and closure
• Coordinate unresolved or technically infeasible remediations with cybersecurity, system owners, vendors, and Government stakeholders
• Apply approved DISA Security Technical Implementation Guides and endpoint-security baselines
• Support endpoint compliance reporting, vulnerability remediation, configuration validation, and audit-evidence collection
• Maintain endpoint inventories, deployment records, configuration baselines, package records, patch status, VDI documentation, and technical diagrams
• Develop and maintain standard operating procedures, field guides, packaging standards, test plans, implementation plans, rollback plans, and recovery procedures
• Follow approved incident, problem, change, release, configuration, asset, security, and quality-management processes
• Provide endpoint health, deployment, patching, compliance, risk, issue, and modernization information for operational and program reporting

Requirements:

• Active Secret clearance or higher
• Bachelor's degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category
• Minimum of eight years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related technical discipline
• Experience designing and maintaining enterprise endpoint images
• Experience developing, testing, and deploying application packages
• Experience supporting enterprise endpoint provisioning, deployment, patching, configuration, and lifecycle management
• Experience engineering or supporting Virtual Desktop Infrastructure
• Experience implementing approved endpoint-security or vulnerability-remediation changes
• Experience troubleshooting complex endpoint, deployment, packaging, patching, or VDI issues
• Knowledge of controlled testing, pilot deployment, phased implementation, validation, rollback, and change-management practices
• Ability to develop technical procedures, image documentation, package records, test plans, deployment plans, rollback procedures, and completion evidence
• Ability to support after-hours maintenance, deployment windows, critical incidents, and endpoint recovery when required
• Strong written, verbal, analytical, and technical problem-solving skills
• Enterprise endpoint engineering and lifecycle management
• Image engineering and automated deployment
• Application packaging and software distribution
• Operating-system and application patch management
• Endpoint configuration and security-baseline implementation
• VDI design, deployment, and troubleshooting
• PowerShell and endpoint-management automation
• Complex troubleshooting and root-cause analysis
• Controlled testing, phased deployment, and rollback planning
• Cybersecurity remediation execution and evidence development
• Technical documentation and configuration management
• Cross-functional engineering coordination
• Strong attention to detail and change discipline
• Microsoft 365 Certified: Endpoint Administrator Associate certification when relevant to the assigned Microsoft 365 or Intune environment
• Experience with Microsoft Intune or Microsoft Endpoint Manager
• Experience with Microsoft Configuration Manager or System Center Configuration Manager
• Experience with Windows Autopilot and modern device provisioning
• Experience with Microsoft Defender for Endpoint
• Experience with Microsoft Entra ID and hybrid endpoint management
• Experience with PowerShell, Microsoft Graph, or other endpoint-automation technologies
• Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats
• Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform
• Experience supporting federal or Department of Defense endpoint environments
• Experience applying DISA Security Technical Implementation Guides to Windows endpoints
• Experience supporting Risk Management Framework controls, vulnerability remediation, or authorization evidence
• Experience with endpoint analytics, digital employee experience, compliance, or configuration-management tools
• Experience supporting large-scale operating-system migrations, device refreshes, or endpoint-management modernization
• CompTIA Security+ or another relevant security certification
• ITIL v4 Foundation certification
• Relevant Microsoft, VMware, Citrix, cloud, automation, or endpoint-management certification