Senior UEM Engineer

JCS Solutions LLC; Fort Meade (MD); On-site; USD 100,000 - 129,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Life insurance

Paid time off (PTO)

401k with employer match

Professional development reimbursement

Job summary

JCS Solutions LLC is seeking a Senior Unified Endpoint Management (UEM) Engineer to design, implement, and optimize modern endpoint management focused on Microsoft Intune and cloud-native device management. You will migrate MECM and on-prem AD to Azure AD–joined, Intune-managed endpoints, working across engineering, security, and operations.

The role emphasizes secure, scalable, and user-centric solutions with DoD compliance and strong collaboration across teams.

Qualifications

• Bachelor’s degree or higher with 4+ years of relevant experience.
• DoD Secret clearance required.
• Proven experience implementing and administering Microsoft Intune.

Responsibilities

• Lead design, architecture, and deployment of Microsoft Intune solutions.
• Migrate from MECM and on-prem AD to Azure AD–joined, Intune-managed endpoints.
• Develop and manage Intune policies, configurations, and deployment strategies.
• Package, deploy, and lifecycle-manage applications in Intune.
• Collaborate with infrastructure and identity teams to modernize GPOs into Intune controls.
• Translate and migrate Group Policy Objects into Intune-based settings.

Skills

Microsoft Intune

PowerShell scripting

Endpoint management

Cross-team collaboration

Education

Bachelor’s degree with 4+ years of relevant experience

Master’s degree with 2+ years of experience

Tools

Azure AD

Autopilot

ESP

Job description

Job Summary

JCS Solutions is seeking a highly skilled Senior Unified Endpoint Management (UEM) Engineer to support the Defense Enclave Services (DES) program—an enterprise-scale digital modernization initiative for the Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies. In this role, you will lead the design, implementation, and optimization of modern endpoint management solutions, with a primary focus on Microsoft Intune and cloud-native device management. You will play a key role in migrating legacy environments (MECM and on-premises Active Directory) to Azure AD–joined, Intune-managed endpoints, helping drive secure, scalable, and user-centric solutions across the enterprise. This position requires both deep technical expertise and the ability to collaborate across engineering, security, and operations teams to deliver resilient and compliant endpoint solutions.

What’s in it for you:

• Join a premier technology firm specializing in innovative solutions.
• Be part of a collaborative, inclusive, and innovative work culture.
• Enjoy tremendous growth potential in a high-performing team environment.
• A robust benefits package:
  • Health, dental, and vision insurance
  • Life insurance
  • Short-and-long term disability
  • Paid time off (PTO)
  • 401k retirement plan with employer match
  • Annual Professional Development Reimbursement Program
  • And more!

What you will do:

• Lead the design, architecture, and deployment of Microsoft Intune solutions aligned with enterprise security, compliance, and user experience requirements
• Drive endpoint modernization efforts, including migration from MECM and traditional AD-joined devices to Azure AD–joined and Intune-managed environments
• Develop and manage Intune policies and configurations, including compliance policies, configuration profiles, and application deployment strategies
• Package, deploy, and lifecycle-manage applications in Intune, emphasizing automation, version control, and end-user experience
• Architect and implement Windows 10/11 provisioning and deployment solutions using Intune, Autopilot, Enrollment Status Page (ESP), and modern provisioning techniques
• Configure and optimize Windows Update for Business (WUfB) to ensure secure, reliable, and timely OS patching
• Collaborate with infrastructure and identity teams to translate and modernize Group Policy Objects (GPOs) into Intune-based controls (Settings Catalog, ADMX-backed policies)
• Partner with Active Directory and MECM/SCCM teams to ensure coexistence strategies and migration readiness
• Integrate Intune with the broader Microsoft 365 ecosystem, including Defender for Endpoint, Conditional Access, and Zero Trust security models
• Implement and enforce endpoint security best practices, including encryption, endpoint protection, compliance baselines, and data loss prevention
• Support security operations by monitoring endpoint-related incidents and integrating telemetry with SIEM/SOC workflows
• Identify opportunities to optimize endpoint management processes, recommending improvements and driving adoption of modern management capabilities
• Develop and maintain comprehensive technical documentation, including architecture diagrams, configuration standards, and migration strategies

What you will bring:

• Bachelor’s degree with 4+ years of relevant experience, or Master’s degree with 2+ years of experience (additional experience may be considered in lieu of degree)
• Active DoD Secret clearance
• Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
• Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
• Strong proficiency in PowerShell scripting to automate administrative tasks, streamline deployments, and troubleshoot endpoint issues.
• Experience collaborating directly with customers, end users, and stakeholders to gather requirements, provide project updates, and deliver technical solutions.
• Excellent communication, organizational, analytical, and problem-solving skills with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Working knowledge of Atlassian tools, including Jira and Confluence, for project tracking, documentation, and team collaboration.
• Current DoD 8570 IAT Level II certification (e.g., Security+ CE, CISSP)

How will you wow us:

• Microsoft certifications such as Microsoft Endpoint Administrator Associate or Microsoft 365 Certified: Endpoint Administrator Expert
• Experience with large-scale enterprise migrations to cloud-native endpoint management
• Familiarity with Zero Trust architecture and modern identity/security frameworks
• Experience integrating endpoint management with SIEM/SOC platforms

JCS Solutions (JCS) is a premier technology firm providing innovative solutions and high-quality services in defense, national security, and civilian sectors. JCS offers enterprise-wide solutions including cloud computing, software development, cybersecurity, digital modernization, and management consulting for the federal government. At JCS, we elevate our customers’ mission through the application of technology and professional services. Our commitment to investing in our workforce drives innovation and progress for our clients, employees, and communities.

JCS is both a Great Place to Work and a Top Places to Work certified company.

Our employees embody our core values, and we are looking for others who do too!

• Customer Experience: Strive for excellence and delight our clients
• Innovation: Embrace creative thinking to enable continual growth and powerful solutions
• Accountability: Take ownership of and pride in our actions and service delivery
• Inspire: Be inspired to be your best self and have fun in the process
• Integrity: Do the right thing, the right way, every time!
• Stewardship: The careful and responsible management of something entrusted to our care.

At JCS Solutions, compensation is based on a number of factors such as location, qualifications, and applicable contract terms. The general salary range for this position is as follows: $100,000.00 - $129,000.00

Please Note: Employment is contingent upon successfully passing a pre-employment drug screening and any other required background checks, consistent with applicable law.

Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to any protected status protected by applicable federal, state, or local laws.

NOTICE: Please be aware that all JCS Solutions communications related to job interviews and offers from our recruiting team willonlycome from @JCSSolutions.com. We want to emphasize thatwe do not conduct any interviews over Discord, Slack, Skype, Zoom, or any chat app.