Security Endpoint Engineer/Admin - Long-Term Contract (Government)

AHU Technologies Inc; Washington (District of Columbia); On-site; USD 90,000 - 130,000; Full time

Job summary

AHU Technologies Inc. is seeking a skilled Security Endpoint Engineer/Admin to join our Citywide team in Washington DC. The role focuses on implementing and operating endpoint security infrastructure, with hands-on responsibility for Intune, JamF, SCCM, and CrowdStrike synergy.

You will manage device provisioning, Autopilot, policy creation, and patch management across Windows and macOS, ensuring secure, up-to-date endpoints and timely support to end-users in a fast-paced environment.

Qualifications

• 6+ years of experience in endpoint engineering/administration.
• Experience with Microsoft Intune, JamF, SCCM, Tanium, and Azure AD.
• Proficiency in device provisioning, OS deployment, patching, and policy creation.

Responsibilities

• Day-to-day administration of MDM environment, including Configuration of Intune and Autopilot.
• Manage endpoints and ensure security, updates, and performance.
• Troubleshoot endpoint issues and support end-users.
• Create/update endpoint agent policies and participate in delivery management.

Skills

Device Management

Microsoft Intune

PowerShell scripting

Shell scripting

Endpoint Security management

Software Packaging & Distribution

OS deployment/patching

Windows Autopilot

Education

Bachelor’s degree in IT or related field

Tools

Microsoft Intune

JamF

SCCM

Tanium

Azure AD

Windows Autopilot

PowerShell

Graph API

Job description

Title

Security Endpoint Engineer/Admin

Location

Washington DC

Minimum Education

Bachelor’s degree in IT or related field or equivalent experience.

Required Experience

6 years

Interviews

In Person

Job Description

The Endpoint Engineer/Administrator shall assist with implementing and operating Endpoint Security infrastructure to protect the IT infrastructure. The position is in the Citywide. The Endpoint Engineer/Administrator will be intimately familiar with next generation Endpoint management/protection platforms including but not limited to Microsoft Intune, Tanium, and SCCM provisioning and patching management, Jamf macOS device management and CrowdStrike security. The engineer must have mastery level skill with Endpoint Device and patch Management. Hands on experience with implementing and managing the following technologies like Device Provisioning, Windows Autopilot, Creation and Configuration of device policies, Software Packaging & distribution, Windows OS and software patching, reporting in Intune using Graph explorer and API. To be successful in this position, the candidate will be responsible for managing the endpoint devices within our organization, ensuring that they are secure, up-to-date, and functioning at peak performance. As an Endpoint Engineer, the candidate also be responsible for providing support to end-users, troubleshooting issues, and identifying areas for improvement. Must display excellent teamwork skills, technical, written, and oral communication skills, and ability to learn and adapt in a fast-paced environment. The candidate must have in depth knowledge of the afore-mentioned point products and can formulate Security policy and manage Security configuration.

Specific Tasks

• Day-to-day administration of our MDM environment, including Configuration of Intune and Autopilot.
• Maintain the development, test and production environments.
• Manage various device policies and desktop applications in Microsoft Intune and JamF within the organization.
• Deploy software updates, Windows OS patches, and updates to endpoints using automated tools.
• Develop and maintain endpoint operating system infrastructure and perform day to day tune up and maintenance as required policies and procedures.
• Manage various components of Azure AD, Intune, Tanium, and SCCM and Jamf.
• Troubleshoot endpoint issues and provide support to end-users.
• Create and update endpoint agent policies as per requirements.
• Provide assistance and validation of implementation timelines and delivery management.
• Communicate clearly to executive management/end users and manage the reporting process.
• Coordinate and drive Endpoint solutions and direction to achieve measurable increases in OS deployment, end-user knowledge, and operations.
• Application Packaging / scripting for deployment of apps on Windows and macOS.
• Provide up to date information on SW updates and alerts.
• Support team in the design and implementation of highly available, scalable, and secure modern mobility solution using industry best practices on Microsoft Intune and AzureAD + other 3rdparty technologies.
• Create and maintain technical documentation as well as assist with training and related materials as needed.

Skills

• Demonstrated experience in Device Management. Required 6 Years
• Demonstrated experience with Microsoft Intune. Required 3 Years
• Demonstrated experience using Device Provisioning. Required 2 Years
• Demonstrated experience with PowerShell and Shell scripting. Required 3 Years
• Demonstrated experience with Endpoint Security management solutions. Required 3 Years
• Software Packaging & Distribution. Required 4 Years
• Device policies, settings, and registry. Required 4 Years
• Operating system (OS deployment, patches, and upgrades). Required 4 Years
• Windows Autopilot Provisioning. Required 2 Years
• BS Degree in IT, Cybersecurity, Engineering, or equivalent experience. Required