Endpoint Engineer

MAG Aerospace; Fairfax (VA); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Health benefits

Tuition assistance

Professional development

Job summary

MAG Aerospace seeks a mid‑to‑senior Endpoint Engineer to manage and secure Windows and macOS devices in a Microsoft GCC High environment. You'll handle Intune enrollment, configurations, and compliance policies while collaborating with Cybersecurity on vulnerability remediation and patching strategies.

Roles include governance development, RMM tooling administration (NinjaOne), and enforcing endpoint security aligned with company standards.

Qualifications

• 4–7 years of endpoint administration and support experience (mid‑to‑senior).
• Hands‑on with Microsoft Intune for Windows/macOS management.
• Experience with vulnerability management and remediation workflows.
• Proficiency with Windows 10/11 and macOS at admin level.
• Experience with compliance policies and endpoint security enforcement.
• Experience with NinjaOne or similar RMM tools and scripting.
• Experience using ITSM platforms like ServiceNow for ticketing/workflows.
• Strong analytical and troubleshooting skills.

Responsibilities

• Operate within a Microsoft GCC High environment.
• Manage and configure Microsoft Intune deployments and compliance policies.
• Collaborate on vulnerability management activities and remediation reporting.
• Manage patch lifecycle for Windows and macOS devices.
• Develop endpoint governance and hardening baselines.
• Administer and support RMM tools for monitoring and automation.
• Enforce endpoint security policies and alignment with standards.
• Provide advanced support for Windows and macOS systems.
• Maintain documentation and SOPs for endpoint management.

Skills

Microsoft Intune

Endpoint administration

Vulnerability management

Patching strategies

RMM tooling

Security governance

Policy enforcement

Troubleshooting Windows/macOS

Scripting (PowerShell/Bash/Python)

ITSM (ServiceNow)

Tools

NinjaOne

ServiceNow

Job description

Position Summary

We are seeking a mid‑to‑senior level Endpoint Engineer with strong experience managing and securing modern devices across Windows and macOS within a Microsoft GCC High environment. This role will be responsible for endpoint configuration, compliance, vulnerability remediation, patching, and operational excellence across our device ecosystem. The ideal candidate has a solid technical foundation in Microsoft Intune, endpoint security, and Remote Monitoring & Management (RMM) tooling, with the ability to drive improvements in device reliability, compliance, and user experience.

Essential Duties and Responsibilities

• Operate confidently within a Microsoft GCC High environment.
• Manage and administer Microsoft Intune, including device enrollment, configuration profiles, compliance policies, and application deployments.
• Collaborate with the Cybersecurity & Risk Management team on vulnerability management activities—identification, prioritization, remediation, and reporting of endpoint vulnerabilities.
• Manage patch lifecycle for Windows and macOS devices to ensure timely and secure updates.
• Develop and optimize endpoint governance, security configurations, and hardening baselines.
• Administer and support RMM tools (e.g., NinjaOne) for monitoring, remote support, automation, and device insights.
• Enforce endpoint security policies and ensure alignment with organizational standards.
• Perform troubleshooting and advanced support for Windows and macOS systems.
• Maintain documentation, SOPs, and operational standards for endpoint management.

Requirements

• 4–7 years of experience in endpoint administration and support (mid‑to‑senior level).
• Hands‑on expertise with Microsoft Intune for Windows and macOS management.
• Experience with vulnerability management, patching strategies, and remediation workflows.
• Proficiency with Windows 10/11 and macOS operating systems at an administrative level.
• Experience with compliance policies, conditional access impacts, and endpoint security enforcement.
• Experience with RMM tools such as NinjaOne, including scripting, monitoring, and automation.
• Experience using ServiceNow or another enterprise ITSM platform for ticketing and workflow management.
• Strong analytical and troubleshooting skills.

Nice‑to‑Have Skills

• Experience with CMMC Level 2 compliance requirements.
• Experience with Azure Virtual Desktop (AVD) deployments and management.
• Microsoft 365 administration experience (Exchange Online, SharePoint, Teams, identity integration).
• Knowledge of Microsoft Defender suite (Defender for Endpoint, Antivirus, Attack Surface Reduction).
• Experience with a SIEM or security analytics platform such as Rapid7 InsightIDR, Sentinel, or similar.
• Scripting experience (PowerShell, Bash, or Python) for automation and tooling.
• MD‑102 Endpoint Administrator certification.

Soft Skills

• Strong communication and documentation abilities.
• Ability to work cross‑functionally with Security, Cloud, and Support teams.
• Ownership mindset and ability to drive initiatives independently.

Special Note

The position is contingent upon the candidate’s ability to meet physical and medical requirements as needed by the position, including compliance with all applicable federal, state, and local jurisdictional requirements.

Benefits and Compensation

At MAG Aerospace, we value your contributions by providing our employees with a robust Total Rewards package that supports your well‑being. Full‑time and part‑time employees working at least 30 hours a week on a regular basis are eligible to participate in MAG’s Total Rewards programs. Our offerings include health, life, disability, financial, and retirement benefits as well as paid leave, professional development, and tuition assistance. Individuals who do not meet the threshold are only eligible for select offerings not inclusive of health benefits. For more information, visit our benefits page: https://www.magaero.com/benefits/.

Salary for this position is determined by various factors including location, education, skills, and experience. The projected compensation range is $120,000 to $150,000 (annualized USD). This estimate represents the typical salary range for this role and is one component of MAG’s total compensation package.