Endpoint Specialist (Windows & Mac)

IBSS; Boulder (CO); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Medical insurance

Dental coverage

Vision coverage

401K match

Paid time off

Job summary

IBSS is seeking an Endpoint Specialist (Windows & Mac) to manage enterprise endpoints and ensure security compliance under the NTIA ISCOM contract. The role covers OS updates, MDM enforcement, and cross-functional coordination with cybersecurity teams.

The candidate should bring hands-on macOS/Windows experience in secure enterprise environments, with strong patching and vulnerability remediation skills, including EDR collaboration.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field, or equivalent experience.
• Minimum of 5 years of IT or endpoint administration experience.
• U.S. Citizenship with active Secret clearance.

Responsibilities

• Manage Windows and Mac laptop endpoints, including configuration, patching, and lifecycle management.
• Implement and maintain MDM to enforce endpoint security policies across macOS and Windows.
• Administer Macintosh devices using JAMF Pro: enrollment, profiles, software distribution, and compliance monitoring.
• Utilize BigFix and related tools to deploy OS and third-party updates on schedule.
• Ensure endpoint configuration standards align with federal security requirements and hardening guidelines.
• Monitor endpoint health, patch compliance, and vulnerability remediation via dashboards.
• Collaborate with cybersecurity teams to align endpoint security controls and EDR strategies.
• Support endpoint security baselines: encryption, MFA, access controls, device policies.
• Troubleshoot enrollment, patch failures, config drift, and security policy enforcement.
• Maintain documentation, SOPs, and reporting artifacts for audits and reviews.
• Provide timely support to NTIA users while maintaining secure endpoint operations.

Skills

Endpoint admin

MDM administration

Patching

Scripting

Compliance

Cross-team communication

Education

Bachelor's degree or equivalent

Tools

BigFix

JAMF Pro

Intune

PowerShell

Bash

Job description

Position Title: Endpoint Specialist (Windows & Mac)

Location: Boulder, CO - On-Site at the customer facility

Clearance: Must be able to obtain a Secret clearance

Salary: $110k-$130K / Based on Years of Experience

Application Deadline: Sept 30, 2026

Position Overview

IBSS is seeking an Endpoint Specialist (Windows & Mac) to support enterprise endpoint security and lifecycle management under the NTIA ISCOM contract. This role is responsible for managing and securing Windows and Macintosh laptop endpoints across the enterprise, ensuring proper configuration, patch management, operating system updates, and compliance with federal cybersecurity standards.

The ideal candidate will bring hands‑on experience administering macOS and Windows devices in a secure enterprise environment, with strong familiarity in mobile device management, enterprise patching, endpoint compliance, and cross-functional coordination with cybersecurity teams. This role is well suited for a technical professional who is detail‑oriented, operationally strong, and committed to maintaining secure and reliable endpoint services.

Core Responsibilities

• Manage and secure Windows and Macintosh laptop endpoints, including system configuration, baseline enforcement, patch deployment, and lifecycle management
• Implement and maintain Mobile Device Management (MDM) solutions to enforce endpoint security policies and compliance controls across macOS and Windows environments
• Administer and secure Macintosh devices using JAMF Pro, including device enrollment, configuration profiles, software distribution, and compliance monitoring
• Utilize enterprise patch management tools, including BigFix and related technologies, to ensure timely deployment of operating system and third‑party application updates
• Oversee endpoint configuration standards and ensure alignment with federal security requirements and organizational hardening guidelines
• Monitor endpoint health, patch compliance, and vulnerability remediation through reporting dashboards and security tools
• Collaborate directly with cybersecurity teams to ensure endpoint security controls, EDR tools, and patching strategies align with NTIA's broader security posture and compliance framework
• Support implementation and enforcement of endpoint security baselines, including encryption, access controls, MFA integration, and device policy enforcement
• Troubleshoot and resolve issues related to device enrollment, patch failures, configuration drift, and security policy enforcement
• Maintain documentation, SOPs, and reporting artifacts to support audits, compliance reviews, and operational transparency
• Provide professional and timely support to NTIA users while maintaining secure and reliable endpoint operations

Minimum Qualifications

• Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent combination of education and relevant experience
• Minimum of 5 years of IT or endpoint administration experience
• U.S. Citizenship required with an active Secret clearance
• Foundational experience managing macOS and Windows devices in an enterprise or federal environment
• Familiarity with BigFix and macOS MDM frameworks such as JAMF and Intune
• Knowledge of scripting languages such as PowerShell or Bash for automation and remediation tasks
• Understanding of system patching, software distribution, and compliance reporting
• Strong communication skills, attention to detail, and commitment to maintaining secure and reliable endpoint operations

Preferred Qualifications

• CompTIA certifications such as A+, Network+, Security+, or AZ-900
• Microsoft or IBM certifications related to BigFix administration
• Apple Certified Support Professional (ACSP) or equivalent macOS certification
• Experience managing Apple Business Manager and automated MDM enrollment workflows
• Familiarity with Active Directory, Azure AD, Microsoft Intune, and identity management for cross‑platform devices
• Experience with endpoint detection and response (EDR) tools and vulnerability management practices
• Experience working within a federal or enterprise IT environment with stringent security compliance requirements
• Experience with imaging deployment and Windows Autopilot

About IBSS Corp.

Since 1992, IBSS, a woman‑owned small business, has provided transformational consulting services to the Federal defense, civilian, and commercial sectors. Our services include cybersecurity and enterprise information technology, environmental science and engineering (including oceans, coasts, climate, and weather), and professional management services.

Our approach is to serve our employees by investing in their growth and development. As a result, our employees bring greater capabilities and provide exceptional service to our clients. In addition to creating career development opportunities for our employees, IBSS is passionate about giving back to the community and serving the environment. We strive to leave something better behind for the next generation.

We measure our success by the positive impact we have on our employees, clients, partners, and the communities we serve. Our tagline, Powered by Excellence, is a recognition of the employees that make up IBSS and ensures we deliver results with quality, applying industry best practices and certifications.

IBSS offers a competitive benefits package that includes medical, dental, vision, and prescription drug coverage with a company‑paid deductible, paid time off, federal holidays, a matching 401K plan, tuition/professional development reimbursement, and Flex‑Spending (FSA)/Dependent Care Account (DCA) options.

IBSS is an affirmative action and equal opportunity employer. All qualified applicants will be considered for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, veteran status, or genetic information. Click https://www.eeoc.gov/poster to see that the EEO is the law.

Please direct any inquiries to the HR Department email at [e-mail].

If you require reasonable accommodation in completing this application, interviewing, completing any pre‑employment testing, or otherwise participating in the employee selection process, please direct your inquiries to the Talent Acquisition department at [e-mail]