Endpoint Engineer (Journeyman)

DecisionPoint | Cortek; United States; Remote; USD 95,000 - 140,000; Full time

Job summary

DecisionPoint is seeking an Endpoint Engineer to develop, maintain, deploy, and support standardized endpoint capabilities for the USMEPCOM ENLIST program. The role covers endpoint images, application packaging, device provisioning, software deployment, patching, configuration baselines, and VDI across USMEPCOM facilities and remote-user environments.

The engineer supports physical and virtual endpoints lifecycle, testing, deployment, and retirement, working with cybersecurity and other

Responsibilities

• Develop, test, maintain, and document standardized endpoint images.
• Maintain image components, operating-system settings, drivers, firmware dependencies, security baselines, required software, and deployment configurations.
• Support image versioning, testing, approval, release, rollback, and retirement processes.
• Validate endpoint images for functionality, compatibility, security, performance, and operational readiness.
• Develop and maintain automated device-deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles.
• Support endpoint deployment using approved Microsoft and Government management platforms.
• Administer approved endpoint-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies.
• Develop, test, maintain, and deploy application packages.
• Package software using approved formats and standards; manage installation/detection/upgrade/removal logic.
• Test application packages for silent installation, detection, compatibility, security, and clean removal.
• Troubleshoot package failures, dependency problems, application conflicts, detection errors, and deployment issues.
• Develop approved scripts and automation for provisioning, packaging, configuration, deployment, validation, and remediation.
• Maintain endpoint-management scripts and configurations in approved documentation and version-control repositories.
• Support patching of endpoint OS, applications, drivers, firmware, and management components.
• Configure and maintain pilot groups, deployment rings, production waves, maintenance windows, deadlines, and exception processes.
• Test OS updates, security patches, vendor patches, and application updates before production deployment.
• Monitor patch and deployment progress, failure rates, compliance status, endpoint health, and approved exceptions.
• Investigate failed patches and coordinate corrective actions, redeployment, rollback, or exception documentation.
• Engineer and support Virtual Desktop Infrastructure capabilities.
• Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, and endpoint-access policies.
• Troubleshoot VDI login, profile, application, display, performance, peripheral, and connectivity problems.
• Support VDI refreshes, upgrades, capacity activities, deployment, testing, and optimization.
• Coordinate VDI dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.
• Support endpoint deployment and refresh projects across geographically dispersed USMEPCOM locations.
• Assist with device provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement.
• Support operating-system upgrades, application migrations, technology refreshes, and endpoint-management transitions.
• Provide advanced engineering support for complex endpoint, image, application-packaging, deployment, patching, and VDI incidents.
• Analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence.
• Support root-cause analysis and implement approved corrective actions for recurring endpoint incidents.
• Assist with major incidents and outages involving endpoint management, software deployments, VDI

Tools

Microsoft Intune

Microsoft Configuration Manager

Windows Autopilot

Job description

DecisionPoint seeks an Endpoint Engineer to develop, maintain, deploy, and support standardized endpoint capabilities for the USMEPCOM ENLIST program. This position supports endpoint images, application packaging, device provisioning, software deployment, patching, configuration baselines, and Virtual Desktop Infrastructure.

The Endpoint Engineer supports physical and virtual endpoints throughout their lifecycle, including testing, deployment, configuration, patching, troubleshooting, refresh, recovery, and retirement. The engineer works with the Senior Endpoint Engineer and other technical teams to deliver secure, consistent, and supportable endpoint services across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP locations, and remote-user environments.

This role maintains a clear division of responsibility with Task 6 cybersecurity personnel. Task 6 identifies, prioritizes, and validates security findings. The Endpoint Engineer evaluates assigned findings, tests the approved correction, implements the operational change through established change-control procedures, and provides deployment evidence for cybersecurity validation.

This position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, incident response, on-site support, or travel may be required.

Duties & Responsibilities

The Endpoint Engineer will:

• Develop, test, maintain, and document standardized endpoint images.
• Maintain image components, operating-system settings, drivers, firmware dependencies, security baselines, required software, and deployment configurations.
• Support image versioning, testing, approval, release, rollback, and retirement processes.
• Validate endpoint images for functionality, compatibility, security, performance, and operational readiness.
• Develop and maintain automated device-deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles.
• Support endpoint deployment using approved Microsoft and Government management platforms.
• Administer approved endpoint-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies.
• Develop, test, maintain, and deploy application packages.
• Package commercial, Government, and internally developed software using approved formats and standards.
• Develop installation, detection, dependency, requirement, upgrade, repair, and removal logic.
• Test application packages for silent installation, accurate detection, compatibility, security, and clean removal.
• Troubleshoot package failures, dependency problems, application conflicts, detection errors, and deployment issues.
• Develop approved scripts and automation for provisioning, packaging, configuration, deployment, validation, and remediation.
• Maintain endpoint-management scripts and configurations in approved documentation and version-control repositories.
• Support patching of endpoint operating systems, applications, drivers, firmware, and management components.
• Configure and maintain pilot groups, deployment rings, production waves, maintenance windows, deadlines, and exception processes.
• Test operating-system updates, security patches, vendor patches, and application updates before production deployment.
• Monitor patch and deployment progress, failure rates, compliance status, endpoint health, and approved exceptions.
• Investigate failed patches and coordinate corrective actions, redeployment, rollback, or exception documentation.
• Engineer and support Virtual Desktop Infrastructure capabilities.
• Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, and endpoint-access policies.
• Troubleshoot VDI login, profile, application, display, performance, peripheral, and connectivity problems.
• Support VDI refreshes, upgrades, capacity activities, deployment, testing, and optimization.
• Coordinate VDI dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.
• Support endpoint deployment and refresh projects across geographically dispersed USMEPCOM locations.
• Assist with device provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement.
• Support operating-system upgrades, application migrations, technology refreshes, and endpoint-management transitions.
• Provide advanced engineering support for complex endpoint, image, application-packaging, deployment, patching, and VDI incidents.
• Analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence.
• Support root-cause analysis and implement approved corrective actions for recurring endpoint incidents.
• Assist with major incidents and outages involving endpoint management, software deployments, VDI