Desktop Engineer

Cyber Shell, LLC; Boulder (CO); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Life & AD&D insurance

Disability insurance

401(k) with company contributions

Paid holidays and vacation days

Certification exams and renewals

Tuition reimbursement

Job summary

Cyber Shell, LLC is seeking a Desktop Engineer to maintain a secure, documented end-user computing environment for a federal agency. You will handle imaging, deployment, and lifecycle support across Windows and macOS, including managed devices and classified systems.

In this hands-on role you will deploy applications with Intune, BigFix, and JAMF Pro; manage vulnerabilities and encryption with BitLocker; provide on-site support during standard hours; and maintain inventories and SOPs while

Qualifications

• 4+ years of desktop/endpoint support in an enterprise environment.
• Active Secret security clearance or ability to obtain one.
• Hands-on experience with endpoint management: Intune required; BigFix and JAMF Pro preferred.
• Experience supporting both Windows and macOS devices.
• Experience with mobile device management (iOS and Android).
• Knowledge of endpoint security and vulnerability remediation.
• Experience with full-disk encryption (BitLocker or equivalent).
• Strong documentation habits (inventory, configuration records, SOPs).
• U.S. citizenship required.
• On-site availability during standard support hours (7:00 a.m.–6:00 p.m., Mon–Fri).
• Preferred: CompTIA A+/Security+; Microsoft endpoint administration certifications; federal support experience.

Responsibilities

• Configure and deploy laptops and mobile devices for end users.
• Deploy applications using BigFix, Microsoft Intune, and Company Portal on iOS devices.
• Manage and support Mac devices using JAMF Pro.
• Manage endpoint vulnerabilities using enterprise security tools and drive remediation.
• Support Windows laptops and desktops, including personal productivity software and BitLocker.
• Administer Apple, Android, and mobile devices through Microsoft Intune.
• Install, configure, and maintain local and network printers, and support MS Surface Hub interactive whiteboards.
• Manage software licenses and maintain hardware/software inventory and documentation libraries.
• Perform preventive and remedial maintenance, run diagnostics, and arrange repair or replacement of equipment.
• Move and install equipment, upgrade components and drivers, and provision and support email accounts.

Skills

Endpoint troubleshooting

Documentation

Cross-team collaboration

U.S. citizenship

Education

Active Secret security clearance

Tools

Microsoft Intune

BigFix

JAMF Pro

BitLocker

Job description

We are seeking a Desktop Engineer to keep a federal agency's end-user computing environment healthy, secure, and fully documented. This is a hands‑on role covering the full endpoint lifecycle, imaging and deploying laptops, managing mobile devices, patching vulnerabilities, and supporting users across Windows and Mac platforms, including support of classified systems.

On a typical day you will:

• Configure and deploy laptops and mobile devices for end users
• Deploy applications using BigFix, Microsoft Intune, and Company Portal on iOS devices
• Manage and support Mac devices using JAMF Pro
• Manage endpoint vulnerabilities using enterprise security tools and drive remediation
• Support Windows laptops and desktops, including personal productivity software and full-disk encryption with BitLocker
• Administer Apple, Android, and mobile devices through Microsoft Intune
• Install, configure, and maintain local and network printers, and support MS Surface Hub interactive whiteboards
• Manage software licenses and maintain hardware/software inventory and documentation libraries
• Perform preventive and remedial maintenance, run diagnostics, and arrange repair or replacement of equipment
• Move and install equipment, upgrade components and drivers, and provision and support email accounts

Requirements

• 4+ years of desktop/endpoint support experience in an enterprise environment
• Active Secret security clearance (or ability to obtain one); required to support classified systems
• Hands-on experience with endpoint management tools: Microsoft Intune required; BigFix and JAMF Pro strongly preferred
• Experience supporting both Windows and macOS devices
• Experience with mobile device management (iOS and Android)
• Working knowledge of endpoint security and vulnerability remediation
• Experience with full-disk encryption (BitLocker or equivalent)
• Strong documentation habits; inventory, configuration records, and SOPs
• U.S. citizenship required
• Available to work on-site during standard support hours (shifts within 7:00 a.m. – 6:00 p.m., Monday–Friday)
• Preferred: CompTIA A+/Security+; Microsoft endpoint administration certifications; prior federal support experience

Benefits

We offer a comprehensive benefits package designed to support you and your family:

• Medical (HSA-qualified UnitedHealthcare plan), dental, and vision coverage; company pays 75% of employee premiums
• $100,000 company-paid life & AD&D insurance, with optional voluntary buy-up coverage for you and your family
• Short-term and long-term disability insurance, 100% company paid
• 401(k) with an automatic 3% company contribution; immediately vested, yours whether or not you contribute
• 11 paid federal holidays, 10 vacation days (growing to 20 with tenure), and 10 sick days per year
• Company-paid certification exams and renewals
• Tuition reimbursement up to $5,000 per year