Microsoft SME

Sprymethods; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Job summary

Sprymethods is seeking a Microsoft Subject Matter Expert to support the endpoint engineering team with expertise in Windows workstation baselines, Intune, Windows Autopilot, and endpoint compliance. You'll engineer secure Windows images, support compliance policies, and implement telemetry solutions.

The ideal candidate has at least eight years of IT experience, including six in enterprise environments, and must hold a Top Secret security clearance. This pivotal role will enhance operational efficiencies across our systems and infrastructure.

Qualifications

• Eight years of experience in information technology (IT), endpoint engineering, or cybersecurity.
• Six years of engineering experience in enterprise environments.
• Top Secret (TS) security clearance.

Responsibilities

• Engineer and maintain secure Windows workstation images.
• Support Microsoft Intune registration, compliance policies, and configuration profiles.
• Implement endpoint telemetry and operational monitoring for Windows environments.

Skills

Windows workstation baselines

Intune

Windows Autopilot

Endpoint compliance

Cybersecurity

Operational monitoring

Education

Bachelor’s degree in information technology, cybersecurity, or related field

Tools

Ivanti

Group Policy

Job description

Who We’re Looking For (Position Overview):

The Microsoft Subject Matter Expert (SME) supports the endpoint engineering team with specialized expertise in Windows workstation baselines, Intune, Windows Autopilot, endpoint compliance, authentication, patch orchestration, and telemetry engineering.

Responsibilities

• Engineer and maintain secure Windows workstation images supporting on-site, remote, and virtual desktop infrastructure (VDI) access.
• Support Microsoft Intune registration, compliance policies, and configuration profiles.
• Support Windows Autopilot for provisioning, registration, and lifecycle management.
• Engineer patch management and deployment workflows using Intune, Group Policy, Ivanti, and related tooling where applicable.
• Implement endpoint telemetry, log forwarding, and operational monitoring for Windows environments.
• Support passwordless and hardware-backed authentication methods where approved.
• Develop operational documentation, runbooks, and validation procedures.

Qualifications

• Eight years of experience in information technology (IT), endpoint engineering, or cybersecurity.
• Six years of engineering experience in enterprise environments.
• Experience with Intune, Windows Autopilot, imaging, patch and configuration management, and compliance enforcement.
• Experience with endpoint logging, telemetry, and audit readiness.
• Top Secret (TS) security clearance.
• Bachelor’s degree in information technology, cybersecurity, or related field, or equivalent experience.