Endpoint Management Systems Engineer - TS/SCI with Polygraph

General Dynamics - IT; Annapolis (MD); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Comprehensive benefits and wellness

401K with company match

Paid time off

Job summary

General Dynamics - IT is seeking an Endpoint Management Systems Engineer to engineer, deploy, secure, and maintain OS images and applications across thousands of endpoints and VDI environments.

You will work with MECM, Intune, and other tools to enforce security baselines, patching, encryption, and secure configurations in DoD-aligned environments.

Qualifications

• Bachelor’s degree in IT or 6+ years of experience in lieu of a degree.
• Active TS/SCI with a favorable Polygraph.
• Hands-on experience with enterprise endpoint management platforms (MECM, Intune, or similar).
• Experience enforcing STIGs, secure configurations, encryption, and RMF-aligned endpoint controls.

Responsibilities

• Build, maintain, and deploy secure OS images for Windows, Linux, Mac, and VDI environments.
• Package and deliver applications using MECM, Intune, and other enterprise tools.
• Implement automated patching and vulnerability remediation across endpoints.
• Maintain full-disk encryption and endpoint security baselines aligned with DoD requirements.
• Monitor endpoint health, compliance, patch levels, and performance; identify issues and drive remediation.

Skills

MECM

Intune

OS imaging

Encryption

RMF/STIGs

Education

Bachelor's degree in IT

Tools

PowerShell

Windows Server

Job description

ENDPOINT MANAGEMENT SYSTEMS ENGINEER

YOUR IMPACT

Own your opportunity to support national defense. Your work will help keep our defense intelligence mission customer’s global mission users secure, connected, and productive—ensuring modern, reliable endpoint environments that directly support intelligence operations every day.

CIS is expanding, and we welcome both seasoned incumbents and new talent. Incumbents bring essential mission knowledge; new team members bring fresh ideas and innovation. Together, we’ll sustain continuity and deliver the next generation of endpoint modernization.

MEANINGFUL WORK AND PERSONAL IMPACT

As an Endpoint Management Systems Engineer, you will support our defense intelligence mission customer’s enterprise by engineering, deploying, securing, and maintaining platforms that deliver operating systems, applications, and configurations to thousands of devices. Whether building OS images, packaging applications, or enforcing security compliance, your work ensures mission users always have reliable, secure, and modern endpoint capabilities across multiple networks and locations.

KEY RESPONSIBILITIES

• Build, maintain, and deploy secure OS images for Windows, Linux, Mac, and VDI environments
• Package and deliver applications using MECM, Intune, and other enterprise tools
• Implement automated patching and vulnerability remediation across all mission‑critical enterprise endpoints
• Maintain full‑disk encryption and endpoint security baselines aligned with DoD requirements
• Monitor endpoint health, compliance, patch levels, and performance; identify issues and drive remediation
• Troubleshoot Tier 2/3 endpoint issues involving OS, applications, authentication, profiles, hardware, and VDI
• Support VDI solutions including session management, thin client configuration, and backend integration
• Provide input into tech refresh testing, hardware onboarding, and enterprise baseline updates.
• Maintain documentation, SOPs, and configuration guides to support sustainment operations.
• Collaboration across engineering, cybersecurity, virtualization, cloud, and operations teams to integrate new capabilities.

WHAT YOU’LL NEED TO SUCCEED

• Systems Engineer Senior: Bachelor’s degree in IT or 6+ years of experience in lieu of a degree
  Systems Engineer Principal: Bachelor’s degree in IT or 8+ years of experience in lieu of a degree
• Active TS/SCI with a favorable Polygraph
• Microsoft 365 Certified: Endpoint Administrator Associate training (preferred)
• DoD 8140 certification (e.g., Security+ CE)
• Hands‑on experience with enterprise endpoint management platforms (MECM, Intune, or similar)
• Proficiency in OS imaging, task sequencing, scripting, driver management, and application packaging
• Experience enforcing STIGs, secure configurations, encryption, and RMF‑aligned endpoint controls
• Ability to troubleshoot complex endpoint issues across OS, authentication, hardware, and VDI stacks
• Strong communication, documentation, and collaboration skills
• LOCATION: Onsite

GDIT IS YOUR PLACE

At GDIT, the mission is our purpose, and our people are at the center of everything we do.
Growth: AI-powered career tool that identifies career steps and learning opportunities
Support: An internal mobility team focused on helping you achieve your career goals
Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
Community: Award-winning culture of innovation and a military-friendly workplace
OWN YOUR OPPORTUNITY Explore an enterprise IT career at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your desire to drive operations forward.

#CIS