Microsoft Systems SME

Digital Management Llc; Tysons (VA); Hybrid; USD 100,000 - 140,000; Full time

Benefits offered by this job

Virtual health visits

Tuition assistance

401(k) matching

Annual awards and recognition

Job summary

Digital Management Llc is looking for a Microsoft Systems SME to lead Windows endpoint engineering efforts for a federal agency. This role demands expertise in Windows workstation design, security compliance, and lifecycle management, ensuring effective deployment of Microsoft endpoint services across the enterprise.

The ideal candidate will have substantial experience in Information Technology and rigorous knowledge of Microsoft Intune and Windows Autopilot for device provisioning and compliance.

Qualifications

• 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity.
• 6+ years performing engineering functions in enterprise environments.
• Hands-on experience with Windows Autopilot for device provisioning.

Responsibilities

• Engineer and maintain secure Windows workstation images.
• Configure and maintain Microsoft Intune device compliance policies.
• Manage Windows Autopilot for automated device provisioning.

Skills

Microsoft Intune

Windows Autopilot

Endpoint Engineering

Cybersecurity

Group Policy Objects

Ivanti

KACE

Passwordless authentication

Education

Bachelor's degree in Information Technology, Cybersecurity, or a related field

Tools

Microsoft Sentinel

Job description

About DMI

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost‑effective solutions that drive measurable results.

About the Opportunity

DMI is seeking a Microsoft Systems SME to serve as the subject matter expert for Windows endpoint engineering at a federal agency client. In this role, you will lead the design, configuration, and lifecycle management of Windows workstations and Microsoft endpoint management services, ensuring secure, compliant, and well‑documented deployments across the enterprise environment.

Duties and Responsibilities

• Engineer and maintain secure Windows workstation images incorporating approved security baselines, authentication agents, and VDI/remote access capabilities
• Configure and maintain Microsoft Intune device compliance policies, configuration profiles, and conditional access requirements based on user role and device posture
• Manage Windows Autopilot for automated device provisioning, registration, and lifecycle management
• Implement and maintain OS and application patch management using Ivanti, KACE, and Intune/GPO-based orchestration; validate patches post‑deployment and support rollback
• Implement passwordless authentication and hardware‑backed credentials, including YubiKey, CAC, and software keys for privileged and sensitive accounts
• Maintain Windows device enrollment workflows and accurate asset inventory, including provisioning, reassignment, decommissioning, and secure wipe
• Produce and maintain engineering documentation, runbooks, and change records for all Windows endpoint configurations

Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred
• Education requirements may be waived based on professional experience, at the government’s discretion
• 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity
• 6+ years performing engineering (not help desk) functions in enterprise environments
• Expert‑level proficiency with Microsoft Intune, including compliance policies, configuration profiles, and conditional access
• Hands‑on experience with Windows Autopilot for device provisioning and lifecycle management
• Experience with Ivanti and/or KACE for OS and application patch management
• Experience with Group Policy Objects (GPO) for Windows endpoint configuration and security enforcement
• Experience implementing passwordless authentication and hardware‑backed credentials (YubiKey, CAC, software keys)
• Experience working under formal change control, audit, and security governance processes

Required Skills & Certifications

• Microsoft certifications in endpoint management or cloud administration (e.g., MD‑102, MS‑102)
• Experience with Microsoft Sentinel or equivalent SIEM for Windows endpoint telemetry
• Familiarity with hybrid identity environments integrating on‑premises Active Directory with Entra ID

Clearance Requirements: Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance. Active Top Secret (TS) clearance required.

Citizenship Status Required: Must be a U.S. Citizen

Physical Requirements: None required for this position.

Location: Remote, US

Working at DMI

DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:

• Do What’s Right – We lead with honesty and integrity.
• Own the Outcome – We take responsibility and deliver.
• Deliver for Our Customers – We are relentless about delivering value.
• Think Bold, Act Smart – We innovate with purpose.
• Win Together – We collaborate and celebrate our success.

These values aren’t just ideals—they show up in how we support every part of your well‑being:

• Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
• Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
• Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
• Recognition – Annual awards, service anniversaries, referral bonuses, and peer‑to‑peer shoutouts that spotlight your achievements.
• Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.

DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. U.S. citizenship may be required for some positions.