Endpoint Engineer (Senior)

DecisionPoint | Cortek; United States; Remote; USD 110,000 - 170,000; Full time

Job summary

DecisionPoint | Cortek seeks an Endpoint Engineer to design, secure, and modernize enterprise endpoint capabilities for dispersed users. You will own endpoint images, packaging, provisioning, deployment, and VDI engineering, collaborating with cybersecurity and IT teams to ensure compliant operations.

The role emphasizes automation, standardized images, and robust change control. Occasional travel and remote work are possible, with preference for Chicago-area candidates.

Qualifications

• Senior engineering role owning endpoint images and packaging.
• Experience in enterprise endpoint deployment, patching, and configuration baselines.
• Familiarity with VDI engineering and endpoint-management platforms.

Responsibilities

• Serve as the senior engineer for endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.
• Design, build, test, maintain, and document standardized endpoint images.
• Maintain image components, drivers, firmware dependencies, OS settings, security baselines, and deployment configurations.
• Establish image versioning, testing, approval, rollback, release, and retirement procedures.
• Validate endpoint images against functional, security, performance, compatibility, and operational requirements.
• Develop and maintain automated deployment task sequences, provisioning workflows, configuration profiles, and enrollment processes.
• Engineer and support endpoint deployment using approved Microsoft and Government management platforms.
• Support modern endpoint-management and co-management with Intune, Configuration Manager, Windows Autopilot.

Skills

Endpoint imaging

Packaging

Deployment automation

VDI engineering

Security baselines

Intune

Configuration Manager

Windows Autopilot

Tools

Microsoft Intune

Configuration Manager

Windows Autopilot

Job description

Overview

DecisionPoint seeks an Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities supporting the USMEPCOM ENLIST program. This senior engineering position owns endpoint images, application packaging, device provisioning, software deployment, endpoint patching, configuration baselines, and Virtual Desktop Infrastructure engineering.

The Endpoint Engineer develops standardized, repeatable, and secure endpoint solutions for geographically dispersed users and locations. The engineer supports physical and virtual endpoints throughout their lifecycle, including design, testing, deployment, configuration, patching, troubleshooting, refresh, recovery, and retirement.

This position works closely with the Task 6 cybersecurity team while maintaining a clear division of responsibility. Task 6 identifies, prioritizes, and validates security findings. The Endpoint Engineer evaluates operational impacts and implements the approved endpoint configuration, software, image, patch, or remediation changes through established change-control procedures. The engineer then provides deployment and completion evidence for cybersecurity validation.

The Endpoint Engineer collaborates with the Service Desk, field support, Active Directory, virtualization, cloud, network, application, cybersecurity, and Government teams. This position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, critical incident support, on-site work, or travel may be required.

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.

Duties & Responsibilities

The Endpoint Engineer will:

• Serve as the senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.


• Design, build, test, maintain, and document standardized endpoint images.


• Maintain image components, drivers, firmware dependencies, operating-system settings, security baselines, required software, and deployment configurations.


• Establish image versioning, testing, approval, rollback, release, and retirement procedures.


• Validate endpoint images against functional, security, performance, compatibility, and operational requirements.


• Develop and maintain automated deployment task sequences, provisioning workflows, configuration profiles, and enrollment processes.


• Engineer and support endpoint deployment using approved Microsoft and Government management platforms.


• Support modern endpoint-management and co-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies.


• Develop, test, maintain, and deploy application packages using approved formats and packaging standards.


• Package commercial, Government, and internally developed software for controlled endpoint deployment.


• Develop installation, detection, dependency, requirement, upgrade, repair, and removal logic for software packages.


• Test application packages for silent installation, proper detection, compatibility, security, user experience, and clean removal.


• Troubleshoot failed installations, package conflicts, missing dependencies, detection problems, and deployment errors.


• Develop approved scripts and automation for packaging, provisioning, configuration, deployment, validation, and remediation.


• Maintain endpoint-management automation in approved version-control and documentation repositories.


• Design and administer endpoint patching processes for operating systems, approved applications, drivers, firmware, and management components.


• Establish deployment rings, pilot groups, production waves, maintenance windows, deadlines, exception handling, and rollback procedures.


• Test operating-system updates, security patches, vendor patches, and application updates before production deployment.


• Monitor deployment progress, failure rates, compliance status, endpoint health, and outstanding exceptions.


• Investigate failed patches and coordinate corrective actions, redeployment, or approved exceptions.


• Engineer and support Virtual Desktop Infrastructure capabilities.


• Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, policies, and endpoint-access requirements.


• Monitor and troubleshoot VDI performance, availability, login, profile, application, display, peripheral, and connectivity issues.


• Support VDI modernization, capacity planning, testing, deployment, and optimization.


• Coordinate VDI platform dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.


• Support enterprise endpoint deployment and refresh projects across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP sites, and remote users.


• Develop technical implementation plans for device refreshes, operating-system upgrades, application migrations, and endpoint-management tran