Endpoint Specialist

Expression Networks; Boulder (CO); On-site; USD 95,000 - 125,000; Full time

Benefits offered by this job

401k matching

Medical/dental/vision insurance

Education reimbursement

Life insurance

PTO and holidays

Job summary

Expression Networks seeks an Endpoint Specialist in Boulder, CO to manage Windows and Mac endpoints, enforce baselines, deploy patches, and maintain secure configurations across the enterprise for NTIA.

Candidates should have JAMF Pro expertise for macOS, BigFix and Intune experience, and a solid handle on MDM policies to support federal security requirements and audits.

Qualifications

• Experience managing Windows and macOS endpoints in enterprise environments.
• Familiarity with federal cybersecurity requirements and audits.

Responsibilities

• Manage Windows and Mac endpoints: configuration, baseline enforcement, patch deployment and lifecycle management.
• Implement and maintain MDM solutions to enforce endpoint security policies.
• Administer macOS devices using JAMF Pro: enrollment, profiles, software distribution and compliance monitoring.
• Utilize patch management tools (BigFix preferred) for OS and application updates.
• Ensure alignment with NTIA security posture and compliance framework.
• Monitor endpoint health, patch compliance and remediation via dashboards.

Skills

Endpoint administration

MacOS administration

Patch management

Security compliance

Education

Bachelor's degree in IT/CS

Tools

JAMF Pro

BigFix

Intune

MDM

PowerShell

Bash

Job description

Endpoint Specialist

Expression is seeking a mission-driven Endpoint Specialist to support the National Telecommunications and Information Administration (NTIA). This role is responsible for managing and securing all Windows and Macintosh laptop endpoints across the enterprise, ensuring proper configuration, patch management, operating system updates, and compliance with federal cybersecurity standards. The Endpoint Specialist will implement and enforce mobile device management (MDM) policies, administer enterprise patching platforms, and collaborate closely with cybersecurity teams to ensure endpoint security controls align with NTIA’s overall security posture.

The ideal candidate brings hands-on expertise administering macOS devices through JAMF and demonstrates proficiency with enterprise patching technologies such as BigFix and related tools in a secure federal environment.

Location

• 325 Broadway, Boulder, CO 80305

Responsibilities

• Manage and secure all Windows and Macintosh laptop endpoints, including system configuration, baseline enforcement, patch deployment, and lifecycle management.
• Implement and maintain Mobile Device Management (MDM) solutions to enforce endpoint security policies and compliance controls across macOS and Windows environments.
• Administer and secure Macintosh devices using JAMF (JAMF Pro), including device enrollment, configuration profiles, software distribution, and compliance monitoring.
• Utilize enterprise patch management tools including BigFix (preferred), and related technologies to ensure timely deployment of operating system and third-party application updates.
• Oversee endpoint configuration standards, ensuring alignment with federal security requirements and organizational hardening guidelines.
• Monitor endpoint health, patch compliance, and vulnerability remediation through reporting dashboards and security tools.
• Collaborate directly with cybersecurity teams to ensure endpoint security controls, EDR tools, and patching strategies align with NTIA’s broader security posture and compliance framework.
• Support implementation and enforcement of endpoint security baselines, including encryption, access controls, MFA integration, and device policy enforcement.
• Troubleshoot and resolve issues related to device enrollment, patch failures, configuration drift, and security policy enforcement.
• Maintain documentation, SOPs, and reporting artifacts to support audits, compliance reviews, and operational transparency.
• Provide professional and timely support to NTIA users while maintaining secure and reliable endpoint operations.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field OR equivalent combination of education and relevant experience.
• Minimum of 5 years of IT or endpoint administration experience.
• U.S. Citizenship required
• Foundational experience managing macOS and Windows devices in an enterprise or federal environment.
• Working experience with JAMF Pro, Intune and BigFix is required
• Knowledge of scripting languages such as PowerShell or Bash for automation and remediation tasks.
• Understanding of system patching, software distribution, and compliance reporting.
• Strong communication skills, attention to detail, and commitment to maintaining secure and reliable endpoint operations.

Preferred Experience

• CompTIA certifications such as A+, Network+, Security+ or AZ-900.
• Microsoft or IBM certifications related to BigFix administration.
• Apple Certified Support Professional (ACSP) or equivalent macOS certification.
• Experience managing Apple Business Manager and automated MDM enrollment workflows.
• Familiarity with Active Directory / Azure AD, MS Intune, and identity management for cross-platform devices.
• Experience with endpoint detection and response (EDR) tools and vulnerability management practices.
• Experience working within a federal or enterprise IT environment with stringent security compliance requirements.
• Imagine deployment, Autopilot.

Benefits

Expression offers highly competitive salaries, performance-based incentives, and additional benefits, such as:

• 401k matching
• PPO and HDHP medical/dental/vision insurance
• Education reimbursement up to $10,000/yr
• Complimentary life insurance
• Generous PTO and 11 days of holiday leave

About Expression:

Founded in 1997 and headquartered in Washington DC, Expression provides data fusion, data analytics, AI/ML, software engineering, information technology, and electromagnetic spectrum management solutions to the U.S. Department of Defense, Department of State, and national security community. Expression’s culture focuses on creating immediate and sustainable value for our clients via agile delivery of tailored solutions built through constant engagement with our clients. Expression was ranked #1 on the Washington Technology 2018\'s Fast 50 list of fastest-growing small business Government contractors and a Top 20 Big Data Solutions Provider by CIO Review.

We make sure to provide everyone with the tools and opportunities to grow while working on some of the newest technologies in the industry. We get excited about celebrating our professionals\' milestones, accomplishments, promotions, overcoming challenges, and many other aspects that make an engaging collaborative environment.

Equal Opportunity Employer/Veterans/Disabled

Expression is an Equal Opportunity Employer. If you require a reasonable accommodation during the application or interview process, please submit your request to our Human Resources department through the application portal.