Client Engineer

Planned Systems International, Inc.; Fort Walton Beach (FL); On-site; USD 95,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) retirement plan

Tuition reimbursement

Paid leave

Job summary

Planned Systems International, Inc. is seeking a Client Engineer to support the AFSOC AEMI program at Hurlburt Field, FL. You will own Windows client/VDI baselines, configure GPO/Intune policies, and ensure secure, compliant endpoints across distributed sites.

Responsibilities include packaging and deploying updates, maintaining deployment pipelines, and coordinating with ISSM/ISSO on RMF and STIG artifacts. Leadership of a small team is expected.

Qualifications

• Active security clearance required.
• DoD 8570/8140 IAT II certification.
• 6-8 years in endpoint/client engineering for enterprise or mission systems.
• Clear, concise communication with operators and leadership; strong documentation discipline.
• Mentorship and teamwork to develop junior engineers.

Responsibilities

• Own the gold image baseline(s) (Windows client/VDI) and DISA STIG/RMF alignment.
• Design and maintain endpoint configuration policies (GPO/Intune), patching baselines, and secure software distribution.
• Engineer integrations for mission apps, middleware, network solutions, and C2 toolsets for optimized performance.
• Lead packaging, testing, and rollout of client updates across Dev/Test/Prod environments.
• Establish and operate deployment pipelines (SCCM/MECM, Intune, PDQ) with auditable change control.
• Triage endpoint issues, perform root cause analysis, and drive corrective actions.

Skills

Active security clearance

DoD 8570/8140 IAT II

6-8 years endpoint engineering

Clear, concise communication

Mentorship & teamwork

Windows client OS 10/11

VDI (Horizon/Citrix)

GPO/Intune/MECM/SCCM

PowerShell scripting

EDR/AV/BitLocker/PKI

Tools

SCCM

Intune

PDQ

MSI/WIM/MDT

Job description

Client Engineer

Location: US-FL-Hurlburt Field

Overview

Planned Systems International (PSI) is an Enterprise IT services company who focuses on designing, building, securing, and operating cutting‑edge software solutions that drive mission success and operational excellence for Federal Government organizations. PSI is currently seeking a Client Engineer to directly support the global Air Force Special Operations Command (AFSOC) Enhanced Mission Integration (AEMI) program at Hurlburt Field, FL. The position focuses on endpoint architecture, deployment, sustainment, and cyber compliance for mission workstations, VDI, and peripheral integrations, ensuring secure, reliable, and high‑performing operator experiences across distributed sites.

Essential Functions and Job Responsibilities

Client Platform Architecture & Engineering

• Own the gold image baseline(s) (Windows client/VDI), configuration standards, and hardened builds aligned to DISA STIGs/RMF control inheritance.
• Design and maintain endpoint configuration policies (GPO/Intune), patching baselines, driver/firmware strategies, and secure software distribution.
• Engineer integrations for mission applications, middleware, network solutions and C2 toolsets (e.g., messaging, data services, visualization clients), optimizing launch and performance.

Deployment & Sustainment

• Lead packaging, testing, and staged rollout of client updates (OS, apps, certificates) across environments (Dev/Test/Prod).
• Establish and operate deployment pipelines (SCCM/MECM, Intune, PDQ, or equivalent) with auditable change control.
• Troubleshoot escalated endpoint issues; perform rootcause analysis; drive permanent corrective actions and knowledge base updates.

Cybersecurity & Compliance

• Partner with ISSM/ISSO to implement technical control overlays; ensure evidence for RMF, STIG checklists, ACAS/Tenable findings, and POA&M closure.
• Manage hostbased security (EDR/AV), device control, disk encryption (BitLocker), and certificate lifecycle (PKI) for clients and peripherals.
• Support ATO sustainment by keeping artifacts current (Diagrams, SSP annexes, hardening guides, control traceability).

Operations & Reliability

• Define SLAs for client uptime, patch currency, and ticket response; publish dashboards and trend reports.
• Lead service transition to operations, including readiness checklists, spares planning, and fielding guides for remote sites.
• Coordinate with network, server, and application teams to resolve crossdomain or performance issues affecting operators.

Team Leadership & Coordination

• Leads a small team of client engineers/technicians; set priorities, coach, and perform quality reviews.
• Maintain a disciplined backlog and work boards; run standups, planning, and retros with PM support.
• Interface with government stakeholders, vendors, and subcontractors; ensure deliverables meet CDRL requirements.

Minimum Requirements

• Security Clearance: Active T3 investigation, with the ability to obtain and maintain necessary security clearances as required for access to classified information.
• Certification: DoD 8570/8140 IAT II (e.g., Security+ CE).
• Experience:
  • 6-8 years in endpoint/client engineering for enterprise or mission systems.
  • Clear, concise communication with operators and leadership; strong documentation discipline.
  • Bias for action with controlled change management; ability to triage, prioritize, and prevent regression.
  • Mentorship and teamwork-develop junior engineers and foster continuous improvement.
  • Customer oriented mindset focused on mission impact and CPARs aligned delivery excellence.
• Technical Skills:
  • Windows client OS (10/11), VDI (e.g., Horizon/Citrix), GPO/Intune/MECM/SCCM.
  • Packaging/scripting (PowerShell), automation, configuration management, and image engineering (WIM/MDT).
  • Endpoint security: EDR/AV, BitLocker, device control, PKI/cert management, STIG/RMF artifacts.
  • Troubleshooting tools (Event Viewer, ProcMon, PerfMon), driver/firmware management, hardware peripherals.
• Methodologies/Tools:
  • Agile/Scrum familiarity; ticketing (ServiceNow/Jira), documentation (Confluence/SharePoint), CI/CD concepts for endpoint updates.

Desired Qualifications

• Experience with Air Force programs, AFLCMC/HN, or C2/C4ISR mission systems.
• RMF/ATO experience (SSP, control implementation, ATO sustainment); DISA STIG automation (e.g., STIG Viewer, SCAP).
• Microsoft certifications (MD102/MD101, AZ104, MS900), VMware/Citrix VDI, ITIL Foundation.
• Exposure to Zero Trust endpoint strategy, modern management at scale, and performance tuning for mission apps.
• Familiarity with scripting for deployment pipelines and telemetry (PowerShell, Python optional).
• Linux experience (client or server hardening, configuration management, and troubleshooting in mixed OS environments).

Physical Demands

• Must be able to lift and carry up to 50 pounds independently as part of regular job duties.

Company Benefits

PSI offers full-time, benefits eligible employees a competitive total compensation package that includes paid leave, and options for employer sponsored group medical, dental, vision, short-term and long-term disability, life insurance, AD&D coverage, legal services, identity theft, and accident insurance. Flexible spending account and health saving account options offer pre-tax savings for qualified medical, dental, and vision expenses. The company sponsored 401(k) retirement plan has an employer contribution match that is immediately vested. We invest in the professional growth of our employees through professional courses, certifications, and tuition reimbursement programs.

EEO Commitment

It is company policy to promote equal employment opportunities. All personnel decisions, including, but not limited to, recruiting, hiring, training, promotion, compensation, benefits, and termination, are made without regard to race, color, religion, age, sex, sexual orientation, pregnancy, gender identity, genetic information, national origin, citizenship status, veteran status, protected veteran status, disability, or any other characteristic protected by applicable federal, state, or local law.

Reasonable accommodations for applicants and employees with disabilities will be provided. If a reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources by emailing [e-mail], or by dialing 703-575-8400.