Senior Endpoint Engineer | R&D Specialist

VetRamp; San Antonio (TX); Hybrid; USD 120,000 - 150,000; Full time

Job summary

VetRamp in San Antonio, TX seeks a Senior Endpoint Engineer/R&D Specialist to architect and sustain endpoint management across on‑prem and cloud environments. You will design compliant packaging, security configurations, and deployments for DHA endpoints.

The role leads Tier 3/4 support, advances automation, and guides RMF/Zero Trust alignment, DISA/NIST compliance, and modernization of endpoint delivery for reliability and performance.

Qualifications

• Experience designing and deploying endpoint management across mixed environments.
• Strong knowledge of security baselines and RMF/DoD compliance requirements.
• Proficiency with enterprise packaging and deployment tools.

Responsibilities

• Engineer and deploy endpoint management solutions for virtual and physical environments.
• Package, test, and configure baseline applications and images for end systems.
• Architect endpoint delivery frameworks for provisioning, patching, monitoring, and sustainment.
• Engineer migration strategies from MECM to Intune and develop endpoint reporting.
• Validate endpoint compliance with DISA STIGs, RMF, and NIST standards.
• Maintain artifacts in eMASS including POA&Ms and continuous monitoring docs.
• Build and maintain desktop OS images and standard software configurations.
• Design mobile device provisioning and security configurations.
• Lead Tier 3/4 support and drive endpoint automation initiatives.

Skills

MECM (SCCM)

Intune

PowerShell

Windows Server OS

Hyper-V

Azure

Entra ID

GPO

eMASS

DISA STIG

NIST 800-series

RMF

Zero Trust

Automation

Packaging

Education

Bachelor’s degree in information technology or cybersecurity

GCLD or CCE or CASP or CEH or GLSC or CISSP

Tools

AdminStudio

WiseScript

SCAP Checker

DISA STIG Viewer

MDT

Job description

Senior Endpoint Engineer | R&D Specialist

Location: San Antonio, TX (Hybrid On-Prem/Cloud Environment)

Clearance Level: Public Trust (ADP/IT-II) or Tier 3 Investigation (NACLC)

Program Overview:

The Defense Health Agency’s Domain and Directory Services Branch (DDSB) sustains a global IT enterprise serving over 200,000 users and 250,000 devices across 250 military medical sites worldwide. Endpoint Engineering Services plays a critical role in enabling secure, reliable, and centrally managed endpoint operations across hybrid environments—spanning on-premises infrastructure, cloud, and SaaS platforms. The team develops engineering frameworks that ensure endpoint consistency, performance, compliance, and support for mission-critical medical readiness.

Summary:

The Senior Endpoint Engineer/R&D Specialist is responsible for architecting, developing, and sustaining endpoint management and delivery solutions that meet DoD and DHA operational and security requirements. This includes designing compliant application packaging, security configurations, software deployments, and mobile device solutions across the hybrid DHA ecosystem. The engineer will also lead Tier 3/4 support efforts, drive endpoint automation and modernization initiatives, and provide technical leadership in support of RMF and Zero Trust alignment.

Key Responsibilities:

Application Integration & Enterprise Management:

• Engineer and deploy endpoint management solutions (MECM, Intune, etc.) for both virtual and physical environments.
• Package, test, and configure baseline applications and images for DHA endpoints.
• Architect endpoint delivery frameworks to support centralized provisioning, patching, monitoring, and sustainment of services across hybrid (on-prem/cloud/SaaS) environments.
• Engineer migration strategies from MECM to Intune and develop modern endpoint reporting capabilities.

Endpoint & Identity Security:

• Validate endpoint compliance with DISA STIGs, DoDI 8510.01 (RMF), and NIST cybersecurity standards.
• Conduct risk assessments and apply IA controls across all application and OS lifecycle stages.
• Engineer and maintain endpoint configurations supporting Zero Trust, encryption, data-at-rest (DAR), and continuous monitoring.
• Maintain artifacts in eMASS, including POA&Ms, risk assessments, and continuous monitoring documentation.

Desktop & Endpoint Engineering:

• Build and maintain desktop OS images and standard software configurations for enterprise deployment.
• Engineer solutions supporting task sequences, group policies, and profile/data management.
• Modernize legacy configurations and support cloud-managed endpoints for improved user experience and performance.
• Validate application compatibility and implement endpoint enhancements using industry best practices.

Mobile Engineering:

• Design and implement mobile device provisioning, OS/firmware upgrades, and security configurations.
• Develop transition plans for migrating MDM platforms while preserving user experience and enterprise controls.

Software Design & System Integration:

• Research and develop system-level software solutions, including embedded systems and distribution frameworks.
• Formulate operational specs and conduct in-depth requirement analyses to improve endpoint architectures.

Application Packaging & Automation:

• Engineer, script, and deliver application packages using enterprise deployment tools.
• Test application delivery using hypervisors and simulate endpoint software combinations.
• Ensure compliance with DISA/NIST STIGs in application packaging and configuration management.
• Maintain application baselines and automate patching and updates.

Preferred Tools & Technologies:

• Microsoft MECM (SCCM), Intune, MDT, PowerShell
• Windows Server OS, Windows 10/11
• Hyper-V, Azure, Entra ID, GPO
• ActivClient, eMASS, DISA STIG Viewer
• SCAP Compliance Checker, NIST 800-series
• Application packaging tools (AdminStudio, WiseScript, etc.)

Education & Certification Requirements (per DoD 8140 Qualification Matrices)

1. Microsoft Certified: Cyber Security Architect Expert or Azure Solutions Architect Expert
2. Any of the following…

• Academic Education: Bachelor’s degree in information technology, Cybersecurity, or a related discipline.
• OR Baseline: GCLD or CCE or CASP or CEH or GLSC or CISSP