Microsoft Endpoint Platform Lead

Essnova Solutions, Inc.; United States; Hybrid; USD 120,000 - 160,000; Full time

Job summary

Essnova Solutions, Inc. seeks a Microsoft Endpoint Platform Lead to guide enterprise endpoint-management governance for NIH. You will oversee Windows and macOS governance, Intune and MECM co-management, and centralize configuration baselines and compliance.

You will also support enrollment, migrations, reporting, and security assessments, while coordinating with Azure Arc, Entra and Conditional Access. The role requires 8+ years in endpoint-management and is hybrid remote in Bethesda/Rockville,

Qualifications

• Bachelor's degree or higher in information technology, computer science, cybersecurity, engineering, or related technical discipline.
• 8+ years of enterprise endpoint-management experience.
• 5+ years of hands-on experience with Microsoft Intune and MECM/SCCM.
• Hands-on experience with Intune enrollment, device onboarding and policy configuration.
• Experience with MECM/Intune co-management and centralized endpoint governance.
• Experience supporting large-scale enterprise device populations and multi-organization environments.
• Ability to develop baselines, SOPs, dashboards, and knowledge-transfer materials.

Responsibilities

• Lead enterprise endpoint-management governance across Windows, macOS, and other approved endpoint populations.
• Lead Microsoft Intune and MECM/SCCM co-management, cloud-native Intune configuration, migration, onboarding, and centralized endpoint-management activities.
• Implement, maintain, troubleshoot, and document configuration baselines, security baselines, compliance settings, and exceptions.
• Support enterprise Intune enrollment, device compliance, policy configuration, migrations, and endpoint-management reporting.
• Coordinate JAMF/macOS governance, baseline documentation, onboarding evidence, and authorization support.
• Support integration with Azure Arc, Microsoft Entra, Conditional Access, and device signals.
• Provide systems integration, automation, scripting, and knowledge-transfer materials.

Skills

Leadership

Governance

Security

Cloud-native configurations

Education

Bachelor's degree in IT/CS/Cybersecurity/Engineering

Tools

Microsoft Intune

MECM/SCCM

MECM/Intune co-management

Intune enrollment

Azure Arc

Microsoft Entra

Conditional Access

JAMF

Job description

Microsoft Endpoint Platform Lead

Job Code: MSDEF2
Location: Bethesda/Rockville, MD / Hybrid-Telework
Eligible Employment: Full-Time
Status: Contingent Upon Proposal Award

Essnova Solutions, Inc. is seeking an experienced Microsoft Endpoint Platform Lead to lead enterprise endpoint-management delivery supporting a large-scale Microsoft endpoint management and cybersecurity modernization program for the National Institutes of Health (NIH) . This position is contingent upon Essnova receiving contract award .

What You'll Do

• Lead enterprise endpoint-management governance across Windows, macOS, and other approved endpoint populations.
• Lead Microsoft Intune and MECM/SCCM co-management , cloud-native Intune configuration, migration, onboarding, and centralized endpoint-management activities.
• Implement, maintain, troubleshoot, and document approved configuration baselines, security baselines, compliance settings, operational standards, and exceptions .
• Support enterprise Intune enrollment , device compliance, policy configuration, migrations, and endpoint-management reporting.
• Coordinate JAMF/macOS governance , centralization planning, baseline documentation, onboarding evidence, and authorization support.
• Support integration and dependencies involving Azure Arc, Microsoft Entra, Conditional Access, and device signals .
• Provide systems integration, application-packaging standardization, automation, scripting , and technical troubleshooting.
• Develop and maintain endpoint governance artifacts, technical baselines, SOPs, operational documentation, dashboards, reports, implementation evidence, and knowledge-transfer materials.
• Monitor and report endpoint enrollment, compliance, migrations, baselines, exceptions, risks, dependencies, and operational trends .
• Support ATO, ATU, SSP, security assessments, audits, and compliance evidence for endpoint-management capabilities.
• Support applicable federal security and compliance requirements, including NIST control evidence and Section 508-compliant deliverables .
• Support transition of NIH endpoint-management capabilities from modernization and migration activities into steady-state enterprise operations .

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, Engineering , or a related technical discipline.
• 8+ years of enterprise endpoint-management experience .
• 5+ years of hands-on experience with Microsoft Intune and MECM/SCCM .
• Demonstrated hands-on experience with: Microsoft Intune
• Microsoft Endpoint Configuration Manager (MECM/SCCM)
• MECM/Intune co-management
• Intune enrollment and device onboarding
• Device compliance and policy configuration
• Configuration and security baselines
• Endpoint migrations
• Exception management
• Enterprise endpoint governance and reporting
• Experience supporting large-scale enterprise device populations and complex, multi-organization operating environments.
• Demonstrated experience creating technical baselines, operating procedures, implementation evidence, reports, dashboards, and knowledge-transfer materials .
• Experience supporting enterprise endpoint migrations, centralized management initiatives, and transition into steady-state operations.

Preferred Qualifications

• Experience supporting NIH, HHS, or another civilian federal health/science agency .
• Experience with Azure Arc, Microsoft Entra, Conditional Access, and device signals .
• Experience with JAMF and macOS endpoint management/governance .
• Experience with automation, scripting, systems integration, and application packaging .
• Experience supporting federal authorization/ATO processes, NIST control evidence, security assessments, audits, and compliance requirements .
• Experience producing Section 508-compliant deliverables .
• Microsoft 365 Certified: Endpoint Administrator Associate or a current equivalent Microsoft certification.
• Demonstrated experience achieving measurable improvements in endpoint enrollment, device compliance, migration completion, baseline implementation, exception reduction, or operational transition .

Additional Requirements

• Selected personnel must be willing and able to satisfy applicable post-award security, privacy, background investigation, training, rules-of-behavior, NDA, and Government system/access requirements .
• A signed Letter of Commitment will be required for proposed Key Personnel.

Contingency Notice

This position is contingent upon Essnova Solutions, Inc. receiving contract award and Government approval of proposed Key Personnel. Anticipated contract performance is expected to begin following award.

Equal Employment Opportunity

Equal Employment Opportunity Essnova Solutions, Inc. is an Equal Opportunity Employer. We consider qualified applic