Endpoint Modernization Architect — Intune & Zero Trust

Dunhill Professional Search & Government Solutions; Washington (District of Columbia); Hybrid; USD 150,000 - 175,000; Full time

Job summary

Dunhill Professional Search & Government Solutions seeks a Senior Endpoint Engineer to define and drive modernization of federal agency device provisioning and management. You will guide architecture, policy, and tool selections while remaining hands-on with ConfigMgr, Intune, Autopilot and related tooling.

You will own multi-year roadmaps, coordinate with cross-functional teams, and serve as escalation point for complex endpoint issues, all in a hybrid Washington, DC setting with security-first

Qualifications

• Bachelor's degree or 12+ years of relevant experience in lieu of a degree.
• 8+ years of enterprise Windows endpoint management experience, including 2+ years leading the design of significant endpoint initiatives.
• Hands-on experience with both ConfigMgr and Microsoft Intune, including co-management, having moved at least one workload or device population from ConfigMgr to Intune.
• Has designed and deployed Windows Autopilot for production users in at least one deployment mode.
• PowerShell scripting for automation; able to read and adapt scripts that use the Microsoft Graph API.
• Clear writing of design documents, diagrams and SOPs that other engineers can carry out.
• Experience with incidents, problems and change requests in ServiceNow or a comparable ITSM tool.
• CompTIA Security+ held at start or earned within 90 days.
• On site in Washington, DC at least 2 days per week.
• US Citizenship (no dual citizenship) and the ability to pass a federal background investigation in order to be granted access to sensitive information.

Responsibilities

• Define and maintain the endpoint target-state architecture across identity, provisioning, configuration, application delivery, update management, security and support tooling.
• Own the multi-year endpoint modernization roadmap, with phases, dependencies, entry and exit criteria, and risk for each phase.
• Produce architecture artifacts: current- and target-state diagrams, design documents, architecture decision records (ADRs) and reference configurations.
• Evaluate new Microsoft and vendor capabilities, run proofs of concept, and recommend adoption, deferral or retirement with cost, risk and effort analysis.
• Define the user persona model and set endpoint engineering standards for naming, policy design, assignment and filtering, app packaging and baseline management.
• Advise program leadership on endpoint risk, technical debt, licensing and investment priorities.
• Lead the transition from ConfigMgr to Intune, moving co-management workloads in planned waves with pilot groups and defined success criteria.
• Drive the move from hybrid join toward Entra ID join and zero-touch provisioning with Windows Autopilot.
• Modernize update management with Windows Update for Business and Windows Autopatch, including ring design and driver and firmware update policy.
• Move application delivery to Intune Win32 apps and catalog‑based app management, and retire legacy packages.
• Replace on‑premises dependencies with cloud services where approved, such as Windows LAPS, cloud‑based certificate delivery and Intune Remediations.
• Plan the reduction and eventual decommissioning of ConfigMgr infrastructure.
• Coordinate cutovers with imaging, identity, network, security and service desk teams, with tested rollback plans for each wave.
• Act as senior escalation point for ConfigMgr, Intune, co‑management, Autopilot and Windows 11 client issues.

Skills

Windows endpoint management

ConfigMgr

Microsoft Intune

PowerShell

Microsoft Graph API

Co-management

Windows Autopilot

Windows Autopatch

Azure DevOps Boards

ServiceNow

Security+

Education

Bachelor's degree in Information Technology or Computer Science or related field

Tools

ConfigMgr

Intune

PowerShell

Microsoft Graph API

Azure DevOps Boards

ServiceNow

BeyondTrust

Dell enterprise tooling

Job description

Dunhill Professional Search & Government Solutions seeks a Senior Endpoint Engineer to define and drive modernization of federal agency device provisioning and management. You will guide architecture, policy, and tool selections while remaining hands-on with ConfigMgr, Intune, Autopilot and related tooling.

You will own multi-year roadmaps, coordinate with cross-functional teams, and serve as escalation point for complex endpoint issues, all in a hybrid Washington, DC setting with security-first