Senior Systems Engineer (Hybrid)

CareFirst BlueCross BlueShield; Reston (VA); On-site; USD 99,000 - 196,000; Full time

Job summary

CareFirst BlueCross BlueShield is seeking a Systems Engineer to manage enterprise endpoints and drive Microsoft Copilot integration. You will secure and optimize Windows 11 endpoints and oversee VDI packaging, deployment, and daily end-user support.

The role emphasizes security, reliability, and automation, requiring 5+ years in systems engineering and strong scripting skills to enhance productivity across the organization.

Qualifications

• Bachelor's Degree in Information Technology or Computer Science, or an additional 4 years of related work experience.
• Minimum 5 years of software, hardware and/or systems engineering experience.
• Experience with Windows endpoints, VDI and Copilot in enterprise environments.

Responsibilities

• Manage and support enterprise endpoints, including Windows 11, across physical and virtual desktops.
• Package, test, and deploy software for VDI and physical desktops; implement security patches.
• Configure and optimize Microsoft Copilot features within Microsoft 365 and Entra environments.
• Provide Tier 3 end-user support, troubleshoot hardware/software/connectivity issues, and assist audit/compliance efforts.

Skills

Endpoint management

Copilot engineering

PowerShell scripting

Vulnerability management

Troubleshooting

Security awareness

Collaboration

Documentation

AI tools familiarity

Education

Bachelor's degree in Information Technology or Computer Science

Tools

Intune

SCCM

ServiceNow

Microsoft Copilot

Job description

Resp & Qualifications

Ensures the stability, integrity and efficient operation of the organization information systems that support organizational functions. This is achieved by monitoring, supporting and optimizing all networked software and associated operating systems. Assesses architecture and current system limitations, defines and designs system specifications, disaster recovery procedures and evaluates input/output processes and working parameters for hardware/software compatibility.

Purpose

We are looking for a Systems Engineer to manage and support enterprise endpoints and drive the integration of Microsoft Copilot across the organization. This dual-focus role ensures the security, stability, and performance of both physical and virtual desktops, while also engineering Copilot features to enhance user productivity and automation. Responsibilities include endpoint management, software packaging for virtual Desktop Infrastructure (VDI), vulnerability mitigation, desktop tools and applications administration, Copilot configuration and optimization, audit support, and daily end-user assistance. The ideal candidate will be detail-oriented, security-conscious, and capable of troubleshooting and improving both endpoint and Copilot environments in a fast-paced setting.

Essential Functions

• Installs, tunes, upgrades, troubleshoots, and maintains all computer systems relevant to the supported applications including all necessary tasks to perform operating system administration, user account management, disaster recovery strategy and networking configuration.
• Develop and implement techniques to prevent system problems, troubleshoots incidents to recover services and supports root cause analysis
• Automates the installation and configuration of applications in development and productions environments.
• Evaluates new systems by performing in-depth tests, including end-user reviews. Researches software and related products to support recommendations and purchasing. Determines systems integration issues by evaluating components; developing and completing performance tests; analyzing test data; studying project requirements; analyzing user and potential user input; evaluating similar and related products and systems. Develop system automation and system integration of business processes.
• Improves engineering job knowledge by attending educational workshops; reviewing professional publications; establishing personal networks; benchmarking state-of-the-art practices; participating in professional societies.

Supervisory Responsibility

Position does not have direct reports but is expected to assist in guiding and mentoring less experienced staff. May lead a team of matrixed resources.

Qualifications

Education Level: Bachelor's Degree in Information Technology or Computer Science OR in lieu of a Bachelor's degree, an additional 4 years of relevant work experience is required in addition to the required work experience.

Experience: 5 years software, hardware and/or systems engineering related experience

Preferred Qualifications

• Endpoint Management
• Manage and maintain Windows 11 endpoints across physical and virtual desktop environments (VDI).
• Package, test, and deploy software applications for VDI and physical desktops.
• Implement and enforce security policies, patches, and vulnerability mitigation strategies.
• Administer and optimize desktop tools, applications, and endpoint management solutions.
• Provide Tier 3 support to end users, troubleshooting hardware, software, and connectivity issues.
• Support audit and compliance requirements, ensuring adherence to security and regulatory policies.
• Monitor and enhance endpoint performance, stability, and security through proactive maintenance.
• Automate processes using PowerShell or other scripting tools to improve efficiency.
• Collaborate with IT and security teams to implement best practices for endpoint management.
• Copilot Engineering
• Engineer and configure Microsoft Copilot features within Microsoft 365 and Entra environments.
• Integrate and manage Microsoft Copilot across Windows 11 endpoints to enhance user productivity.
• Develop and maintain Copilot workflows and automation scripts tailored to enterprise needs.
• Train and support end users in leveraging Copilot capabilities for daily tasks and troubleshooting.
• Collaborate with Microsoft and internal teams to optimize Copilot deployment and performance.
• Monitor Copilot usage metrics and feedback to drive continuous improvement.
• Ensure Copilot features comply with organizational security and compliance standards.
• Stay up to date with the latest Windows 11 features, security updates, and industry trends.
• Ability to provide occasional after-hours/weekend support, if needed.
• 3+ years of experience in Windows endpoint management and software packaging.
• 1+ year of experience engineering and configuring Microsoft Copilot in Microsoft 365 and Entra environments.
• Knowledgeable in VDI environments.
• Strong knowledge of endpoint security, patching, and vulnerability management.
• Experience implementing security best practices to harden systems (CIS).
• Experience with desktop application deployment and troubleshooting.
• Familiarity with Intune, SCCM, and ServiceNow is a plus.
• Understanding of AI-driven productivity tools and their integration into enterprise workflows.
• Ability to create and manage Copilot prompts, templates, and automation routines.
• Familiarity with Microsoft Graph API and Copilot extensibility models.
• Strong analytical skills to interpret Copilot usage data and optimize performance.
• Knowledge of audit and compliance requirements related to endpoint security.
• Proficiency in PowerShell scripting for automation and configuration management.
• Strong problem-solving skills and ability to work independently and collaboratively.
• Excellent communication skills to support end users and work with cross-functional teams.

Licenses/Certifications: ITIL Foundations v3 within 180 Days Preferred

Knowledge, Skills And Abilities (KSAs)

• Knowledge of programming languages and web based technologies.
• Proficient in Microsoft Office applications.
• Ability to collaborate to solve technical problems across teams.
• Excellent communication skills both written and verbal.

Salary Range

Salary Range: $98,784 - $196,196

Salary Range Disclaimer: The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the work is being performed. This compensation range is specific and considers factors such as (but not limited to) the scope and responsibilities of the position, the candidate's work experience, education/training, internal peer equity, and market and business consideration. It is not typical for an individual to be hired at the top of the range, as compensation decisions depend on each case's facts and circumstances, including but not limited to experience, internal equity, and location. In addition to your compensation, CareFirst offers a comprehensive benefits package, various incentive programs/plans, and 401k contribution programs/plans (all benefits/incentives are subject to eligibility requirements).

Department

IT Technical Services - Dir

Equal Employment Opportunity

CareFirst BlueCross BlueShield is an Equal Opportunity (EEO) employer. It is the policy of the Company to provide equal employment opportunities to all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veteran or disabled status, or genetic information.

Federal Disc/Physical Demand

Note: The incumbent is required to immediately disclose any debarment, exclusion, or other event that makes him/her ineligible to perform work directly or indirectly on Federal health care programs.

Physical Demands

The associate is primarily seated while performing the duties of the position. Occasional walking or standing is required. The hands are regularly used to write, type, key and handle or feel small controls and objects. The associate must frequently talk and hear. Weights up to 25 pounds are occasionally lifted.

Sponsorship in US

Must be eligible to work in the U.S. without Sponsorship.