Endpoint Security Lead – Windows/macOS & MDM Expert

Expression; Boulder (CO); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

401k matching

PPO and HDHP medical/dental/vision

Education reimbursement up to $10,000/

Complimentary life insurance

Generous PTO and 11 days of holiday

Job summary

Expression is seeking a mission-driven Endpoint Specialist to support the National Telecommunications and Information Administration (NTIA). This role is responsible for managing and securing all Windows and Macintosh laptop endpoints across the enterprise, ensuring proper configuration, patch management, operating system updates, and compliance with federal cybersecurity standards.

The Endpoint Specialist will implement and enforce mobile device management (MDM) policies, administer enterprise

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field OR equivalent combination of education and relevant experience.
• Minimum of 5 years of IT or endpoint administration experience.
• U.S. Citizenship required
• Foundational experience managing macOS and Windows devices in an enterprise or federal environment.
• Working experience with JAMF Pro, Intune and BigFix is required
• Knowledge of scripting languages such as PowerShell or Bash for automation and remediation tasks.
• Understanding of system patching, software distribution, and compliance reporting.
• Strong communication skills, attention to detail, and commitment to maintaining secure and reliable endpoint operations.

Responsibilities

• Manage and secure all Windows and Macintosh laptop endpoints, including system configuration, baseline enforcement, patch deployment, and lifecycle management.
• Implement and maintain Mobile Device Management (MDM) solutions to enforce endpoint security policies and compliance controls across macOS and Windows environments.
• Administer and secure Macintosh devices using JAMF (JAMF Pro), including device enrollment, configuration profiles, software distribution, and compliance monitoring.
• Utilize enterprise patch management tools including BigFix (preferred), and related technologies to ensure timely deployment of operating system and third-party application updates.
• Oversee endpoint configuration standards, ensuring alignment with federal security requirements and organizational hardening guidelines.
• Monitor endpoint health, patch compliance, and vulnerability remediation through reporting dashboards and security tools.
• Collaborate directly with cybersecurity teams to ensure endpoint security controls, EDR tools, and patching strategies align with NTIA’s broader security posture and compliance framework.
• Support implementation and enforcement of endpoint security baselines, including encryption, access controls, MFA integration, and device policy enforcement.
• Troubleshoot and resolve issues related to device enrollment, patch failures, configuration drift, and security policy enforcement.
• Maintain documentation, SOPs, and reporting artifacts to support audits, compliance reviews, and operational transparency.
• Provide professional and timely support to NTIA users while maintaining secure and reliable endpoint operations.

Skills

JAMF Pro

Intune

BigFix

PowerShell

Bash

EDR

Active Directory / Azure AD

Education

Bachelor's degree in IT/CS or equivalent

Tools

JAMF Pro

Intune

BigFix

Job description

Expression is seeking a mission-driven Endpoint Specialist to support the National Telecommunications and Information Administration (NTIA). This role is responsible for managing and securing all Windows and Macintosh laptop endpoints across the enterprise, ensuring proper configuration, patch management, operating system updates, and compliance with federal cybersecurity standards.

The Endpoint Specialist will implement and enforce mobile device management (MDM) policies, administer enterprise