Endpoint Engineer (Senior)

Computer World Services Corp.; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Computer World Services, Corp. seeks a Senior Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities for the USMEPCOM ENLIST program, including endpoint images, packaging, device provisioning, software deployment, patching, configuration baselines, and VDI.

The engineer supports endpoints across HQ, MEPS, remote substations, COOP locations, and remote users. Remote position; Chicago, IL-area candidates preferred.

Qualifications

• Bachelor's degree or equivalent professional experience.
• Eight+ years in endpoint engineering, systems engineering, or VDI.
• Experience designing and maintaining enterprise endpoint images and deploying packages.
• Experience provisioning, deployment, patching, configuration, lifecycle management, and VDI.

Responsibilities

• Lead endpoint imaging, packaging, deployment, patching, and VDI capabilities.
• Design, build, test, and maintain standardized endpoint images with versioning and rollback.
• Develop automated deployment workflows using Intune, Configuration Manager, or Autopilot.
• Package software with installation, detection, upgrade, and removal logic and test deployments.
• Provide Tier 3/4 engineering support for complex endpoint and VDI incidents.
• Coordinate with virtualization, storage, network, and identity teams.

Skills

Endpoint imaging

Application packaging

VDI engineering

PowerShell scripting

Intune/Config Manager

VDI platforms

Security patching

Change control

Education

Bachelor's degree in Information Technology/Information Systems

8+ years endpoint engineering experience

Tools

Microsoft Intune

Configuration Manager

Windows Autopilot

Defender for Endpoint

Entra ID

PowerShell

Microsoft Graph

MSI/MSIX/Win32 App-V

VMware Horizon / VDI

Azure Virtual Desktop / Windows 365 / Citrix

Job description

Computer World Services, Corp. (CWS) seeks a Senior Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities for the USMEPCOM ENLIST program, including endpoint images, application packaging, device provisioning, software deployment, patching, configuration baselines, and Virtual Desktop Infrastructure (VDI). The engineer supports physical and virtual endpoints throughout their lifecycle across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP locations, and remote users. The role maintains a clear division of responsibility with cybersecurity personnel who identify, prioritize, and validate findings, while the Endpoint Engineer tests and implements approved changes through change control and provides deployment evidence for validation.

Key Tasks & Responsibilities

Serve as senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities. Design, build, test, and maintain standardized endpoint images, including drivers, OS settings, security baselines, and required software, and establish image versioning, release, rollback, and retirement procedures. Develop automated deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles using Microsoft Intune, Configuration Manager, Windows Autopilot, or comparable platforms. Package commercial, Government, and internally developed software with installation, detection, dependency, upgrade, and removal logic, and test and troubleshoot package deployments. Develop and maintain approved scripts and automation for provisioning, packaging, configuration, and remediation in version-control repositories. Design and administer endpoint patching for operating systems, applications, drivers, and firmware, establishing pilot groups, deployment rings, maintenance windows, and exception processes; test updates and monitor compliance. Engineer and support VDI base images, desktop pools, application delivery, and user profiles; troubleshoot login, profile, performance, and connectivity issues; and coordinate dependencies with virtualization, storage, network, and identity teams. Support endpoint deployment and refresh projects, OS upgrades, application migrations, and endpoint-management transitions, developing technical implementation plans. Provide Tier 3/Tier 4 engineering support for complex endpoint, packaging, deployment, patching, and VDI incidents, including major incidents and root-cause corrective actions, and improve Service Desk and field-support knowledge content. Review cybersecurity findings assigned to endpoint operations, assess operational impact and rollback needs, implement approved remediation through change and release procedures, and provide completion evidence; apply DISA STIGs and endpoint-security baselines. Maintain endpoint inventories, image and package records, patch status, VDI documentation, SOPs, and deployment and rollback plans, and provide endpoint health and compliance information for program reporting.

Education & Experience Required:

• Bachelor's degree in Information Technology, Information Systems, or a related field, or equivalent professional experience where permitted by the labor category.
• Minimum of eight (8) years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related discipline.
• Experience designing and maintaining enterprise endpoint images and developing, testing, and deploying application packages.
• Experience supporting endpoint provisioning, deployment, patching, configuration, lifecycle management, and VDI.
• Experience implementing endpoint-security or vulnerability-remediation changes using controlled testing, phased deployment, validation, and rollback practices.
• Strong written, verbal, analytical, and technical problem-solving skills.

Preferred:

• Experience with Microsoft Intune, Configuration Manager, Windows Autopilot, Defender for Endpoint, and Entra ID hybrid endpoint management.
• Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.
• Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.
• Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.
• Experience supporting federal or DoD endpoint environments, including DISA STIGs and RMF remediation evidence.
• Experience supporting large-scale OS migrations, device refreshes, or endpoint-management modernization.

Certifications Required:

• Microsoft 365 Certified: Endpoint Administrator Associate, when relevant to the assigned Microsoft 365 or Intune environment.
• Preferred: CompTIA Security+, ITIL 4 Foundation, or relevant Microsoft, VMware, Citrix, cloud, or automation certification.
• Security Clearance Active Secret clearance or higher is required.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

Work Environment / Travel:

• Remote position; Chicago, IL-area candidates preferred.

Occasional after-hours maintenance, deployment windows, critical incident support, on-site work, or travel may be required.

Administrative Notes:

Period of Performance: March 1, 2027 - February 28, 2033 Contract Start Date: March 1, 2027 Note: By applying to this position, the candidate acknowledges and consents to having their resume included in an active competitive Government contract bid.

Computer World Services is an affirmative action and equal employment opportunity employer.

Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is comm