Endpoint Engineer

True Zero Technologies LLC.; United States; Remote; USD 100,000 - 150,000; Full time

Job summary

True Zero Technologies is seeking a skilled Windows endpoint engineer to manage enterprise desktop environments, deploy and configure Windows 10/11, and ensure secure, scalable operations. You will implement Autopilot provisioning, automate tasks with PowerShell, and maintain security baselines across government-ready cloud environments.

Ideal candidates have Deep experience with Intune/Endpoint Manager, GPOs, and Zero Trust concepts, plus familiarity with NIST/FedRAMP or DISA STIG requirements.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or a related technical discipline.
• Experience deploying Microsoft Copilot or enterprise AI desktop applications.
• Experience with Windows Autopilot, Microsoft Graph, and PowerShell automation.
• Experience with Microsoft Intune, Microsoft Endpoint Manager, and Windows 10/11.
• Knowledge of Zero Trust principles, device identity, and Conditional Access.
• Familiarity with DISA STIG, NIST, FISMA, or FedRAMP security requirements.

Responsibilities

• Perform enterprise desktop engineering for Windows 10 and Windows 11, including configuration, deployment, and lifecycle management
• Administer Microsoft Intune and Microsoft Endpoint Manager environments for device enrollment and application deployment
• Design and troubleshoot Group Policy Objects (GPOs) for enterprise security and operational requirements
• Develop Windows provisioning solutions using Autopilot and automated enrollment
• Automate endpoint administration tasks using PowerShell
• Implement STIG-compliant endpoint security baselines and federal hardening requirements
• Manage device compliance and Conditional Access controls within Zero Trust and Microsoft Government Cloud environments
• Support Microsoft Defender for Endpoint for vulnerability management and response

Skills

PowerShell automation

GPO design

Zero Trust/Conditional Access

Copilot / enterprise AI apps

Security frameworks knowledge

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Microsoft Intune

Microsoft Endpoint Manager

Windows Autopilot

Microsoft Graph

Defender for Endpoint

Job description

Responsibilities

• Perform enterprise desktop engineering for Windows 10 and Windows 11, including configuration, deployment, and lifecycle management
• Administer Microsoft Intune and Microsoft Endpoint Manager environments for device enrollment and application deployment
• Design and troubleshoot Group Policy Objects (GPOs) for enterprise security and operational requirements
• Develop Windows provisioning solutions using Autopilot and automated enrollment
• Automate endpoint administration tasks using PowerShell
• Implement STIG-compliant endpoint security baselines and federal hardening requirements
• Manage device compliance and Conditional Access controls within Zero Trust and Microsoft Government Cloud environments
• Support Microsoft Defender for Endpoint for vulnerability management and response

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, IT, or a related technical discipline
• Experience deploying Microsoft Copilot or enterprise AI desktop applications
• Experience with Windows Autopilot, Microsoft Graph, and PowerShell automation
• Experience with Microsoft Intune, Microsoft Endpoint Manager, and Windows 10/11
• Knowledge of Zero Trust principles, device identity, and Conditional Access
• Familiarity with DISA STIG, NIST, FISMA, or FedRAMP security requirements

Preferred Qualifications

• Microsoft 365 Certified: Endpoint Administrator Associate (MD-102)
• AWS Certified Cloud Practitioner

About the Company

True Zero Technologies is a veteran-owned small business dedicated to the purposeful enablement of people and technology. Recognized as a Best Place to Work and an Inc. 5000 fastest-growing company, True Zero focuses on delivering top-tier services through a people-first approach.