Engineer

Systems Plus, Inc.; Washington (District of Columbia); Hybrid; USD 120,000 - 170,000; Full time

Benefits offered by this job

Bonus program

Competitive benefits

Job summary

Systems Plus, Inc. in Washington, DC, is seeking an experienced security engineering professional for a full-time, hybrid position focused on imaging, patching, and endpoint management across Windows and macOS.

A Top Secret clearance is required, with duties spanning engineering design, validation, and remediation within defense and federal contracts. You will automate deployments using Ivanti, KACE, Intune, Autopilot, and JAMF Pro, produce telemetry, and support incident response and audit

Qualifications

• Eight years of experience in IT, Endpoint Engineering, or Cybersecurity.
• Six years of experience performing engineering functions in enterprise environments.
• Bachelor’s degree or equivalent experience; formal education may be waived.
• Experience with change control, audit, and security governance processes.

Responsibilities

• Design, implement, and tune engineering controls to detect and limit initial compromise and lateral movement.
• Design, implement, and maintain standardized endpoint configurations with Ivanti, KACE, Intune, and Windows Autopilot.
• Own imaging and patching processes for secure workstation builds and remediation.
• Ensure device enrollment, provisioning, decommissioning, and lifecycle visibility."
• Ensure telemetry flows to central systems for detection and forensics.

Skills

Endpoint Engineering

Cybersecurity

Windows/macOS Imaging

Image Automation

Intune/Autopilot

JAMF Pro

Passwordless Auth

Endpoint Telemetry

SIEM/EDR

Education

Bachelor’s degree in IT or related field

Tools

Ivanti

KACE

Microsoft Intune

Windows Autopilot

JAMF Pro

YubiKey/CAC auth

Microsoft Sentinel

Job description

Got the Government Contractor Blues? Looking for a company that cares and goes beyond just filling another contract billet? Well, look no further! Experience this family-oriented company that takes pride in you and will help you grow where your passions lie. Holding many Defense & Federal government contracts around the globe, with Systems Plus, you have the opportunity to take on new and evolving challenges, aim beyond what you think you are capable of, and work in collaborative, dynamic, and high-tempo environments.

Our employees are our most valued asset, and we invest in our people because we are in it for the long term. We are committed to your success and well-being and offer competitive benefits packages, salaries, bonus/award programs, and a high potential for professional growth and job opportunities worldwide.

Systems Plus is the company for you! Experience the difference, and let’s talk about your future at Systems Plus today.

Position Title

Position Type

Full-Time, Hybrid

Position Location

Washington, D.C.

Tracking Code

01164

Daily Responsibilities

• Design, implement, and tune engineering controls to detect and limit initial compromise and lateral movement. Integrate these activities into workstation imaging, device registration, and user registration processes to support secure baseline enforcement and accurate asset inventory management.
• Design, implement, and maintain standardized endpoint configurations to support the security, compliance, and integrity of user devices and associated assets throughout their lifecycle using approved endpoint management and deployment tools, including Ivanti, KACE, Microsoft Intune, and Windows Autopilot, as applicable.
• Own engineering design, validation, and lifecycle maintenance of imaging and patching processes to support consistent, secure workstation builds and timely vulnerability remediation. Assess and harden machine identity artifacts, engineer detection for persistence mechanisms, and develop remediation and recovery runbooks.
• Ensure secure, consistent device enrollment and accurate asset tracking across the environment. Support device provisioning, reassignment, decommissioning, secure wipe, recovery key escrow, and lifecycle visibility.
• Ensure endpoints produce telemetry required for detection, troubleshooting, and forensics, and that telemetry flows to central systems in a reliable and auditable manner.
• Follow the assessment-to-remediation workflow by performing technical assessments, producing Findings Reports, submitting Remediation Plans, obtaining required approvals, executing approved remediation during change windows, performing post-change validation, and publishing Validation Reports.
• Produce engineering documentation, operational playbooks, user-facing runbooks, knowledge-transfer materials, and versioned knowledge-base content to make solutions operationally sustainable by the Service Desk and IRM teams.

Years of Experience

• Eight (8) years of experience in Information Technology, Endpoint Engineering, or Cybersecurity.
• Six (6) years of experience performing engineering (not help desk) functions in enterprise environments.

Degree and Certifications

Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience). Formal education requirements may be waived based on relevant professional experience.

Requirements

• Experience working under formal change control, audit, and security governance processes. Endpoint Imaging and Automation Engineering
• Experience building and maintaining Windows and macOS workstation images.
• Experience with image automation, validation, rollback, and version control.
• Experience integrating images with VDI, EDR, authentication, and logging agents. Patch and Configuration Management Engineering
• Hands‑on experience using Ivanti and/or KACE for operating system and application patching.
• Experience managing configuration drift, remediation workflows, and reporting.
• Experience validating patches post‑deployment and supporting rollback.
• Device Enrollment and Identity Engineering
• Experience with Microsoft Intune/Windows Autopilot for provisioning/compliance enforcement.
• Experience using JAMF Pro for macOS endpoint management.
• Experience implementing passwordless authentication and hardware-backed credentials, including YubiKey, CAC, or software keys.
• Logging, Monitoring, and Telemetry Engineering
• Experience configuring endpoint logging, including Windows Event Logs and macOS Unified Logs. • Experience forwarding and validating logs into SIEM/EDR platforms such as Microsoft Sentinel, not limited to Microsoft Sentinel.
• Experience supporting forensic collection and audit readiness.

Required: Clearance

Top Secret (TS) security clearance

About Systems Plus

Systems Plus is headquartered in Rockville, MD with over 2 decades of experience providing Global Enterprise Management, Technology, Engineering and Professional services and solutions across Defense and Federal Civilian government sectors.

From Discovery to Delivery, Systems Plus brings a greater measure of confidence, commitment and value to our clients. With various Defense and Federal contracts across the United States, Europe and Pacific/Asia, we are driving innovation and excellence within the Special Operations Forces Components and Commands, Defense Health Agency, United States Air Force, United States Marine Corps, National Institute of Standards and Technology, House of Representatives and more.

Through our diverse portfolio of clients and capabilities we power vision and insight—discover what’s possible with a Small Business that thinks BIG!

Interested individuals should email their resume with salary expectations and with a cover letter [e-mail] .

Reach out to see how we can partner with you.