Senior Security Endpoint Engineer - Top Secret, DC Onsite

Ardent; Washington (District of Columbia); On-site; USD 120,000 - 180,000; Full time

Job summary

Ardent is seeking a Service Desk Engineer for an onsite role in Washington, DC. The position requires active Top Secret clearance and a strong background in endpoint engineering and cybersecurity, supporting government-grade IT environments.

Responsibilities include building secure workstation images, patch management, and enforcing secure configurations across macOS and Windows, using Ivanti, KACE, JAMF, and Intune. This role emphasizes engineering tasks over routine help desk support.

Qualifications

• Active Top Secret clearance required.
• Bachelor’s degree in IT, Cybersecurity, or related field.
• 8+ years in IT, endpoint engineering, or cybersecurity.
• 6+ years engineering in enterprise environments.
• Experience under formal change control, audit, and security governance.

Responsibilities

• Design and maintain secure standard workstation images for remote users and VDI, across macOS and Windows.
• Design and maintain secure images for on-site users, macOS and Windows.
• Engineer and maintain patching, version control, and lifecycle management with approved deployment methods (Intune, GPO, Company Store).
• Maintain secure baseline configurations for macOS and Windows endpoints for both on-site and remote use cases.
• Use Ivanti and KACE to manage patching, deployment workflows, and remediation of configuration drift.
• Leverage Microsoft Intune to enforce device compliance and security policies by role and device posture.
• Create and maintain standardized workstation images with approved security controls for macOS and Windows, including VDI/remote access clients.
• Maintain imaging toolchains and automation scripts (Ivanti, KACE, JAMF) and verify image integrity before production release.
• Engineer and operate patch management using Ivanti or equivalent, coordinating Intune/GPO patch orchestration for Windows endpoints.
• Implement enrollment workflows for Intune, Autopilot (Windows), and Apple Business Manager / JAMF for macOS and iOS devices.

Skills

Endpoint engineering

Cybersecurity

Security governance

IT infrastructure

Education

Bachelor’s degree in Information Technology, Cybersecurity, or related field

Tools

Ivanti

KACE

JAMF

Microsoft Intune

Group Policy Objects (GPO)

Job description

Ardent is seeking a Service Desk Engineer for an onsite role in Washington, DC. The position requires active Top Secret clearance and a strong background in endpoint engineering and cybersecurity, supporting government-grade IT environments.

Responsibilities include building secure workstation images, patch management, and enforcing secure configurations across macOS and Windows, using Ivanti, KACE, JAMF, and Intune. This role emphasizes engineering tasks over routine help desk support.