Senior Virtualization / Workspace ONE Engineer - Active Secret clearance

PGTEK; Westphalia (MD); Presencial; USD 135.000 - 165.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Relocation assistance

PTO & holidays

Descripción de la vacante

PGTEK is seeking a Senior Virtualization Engineer with strong Workspace ONE UEM experience to support a DoD customer at Joint Base Andrews. The role focuses on architecture, implementation, and optimization of Workspace ONE across a secure enterprise.

The ideal candidate has DoD security compliance knowledge, PKI experience, and hands-on administration of Workspace ONE for 5,000+ devices in an enterprise setting.

Formación

• Extensive hands-on Workspace ONE UEM experience in enterprise environments.
• Experience with iOS/iPadOS and Android Enterprise device management.
• Strong PKI, CAC/PIV authentication, and DoD security requirements.

Responsabilidades

• Architect, deploy, configure, and upgrade Workspace ONE UEM and related components.
• Manage device lifecycle for multiple OS families, including enrollment and compliance.
• Integrate Workspace ONE with identity services and PKI; support RMF/ATO compliance.
• Develop runbooks, SOPs, and ensure secure device deployments.

Conocimientos

Workspace ONE UEM

Android Enterprise

iOS/macOS management

PKI

DoD security compliance

Strong troubleshooting

Communication skills

Educación

Bachelor's degree in IT/CS

Herramientas

PowerShell

REST APIs

Python

Descripción del empleo

Senior Virtualization Engineer / Workspace ONE experience

Location: Joint Base Andrews, MD (100% Onsite)
Salary Range: $135,000–$165,000 annually
Clearance: Active Secret Security Clearance Required

Position Overview:

PGTEK is seeking an experienced Senior Virtualization Engineer to support a Department of Defense customer at Joint Base Andrews. This role will focus on the architecture, implementation, administration, and optimization of Omnissa Workspace ONE solutions across a complex, secure enterprise environment.

The ideal candidate will bring extensive hands-on experience with Workspace ONE Unified Endpoint Management (UEM), formerly VMware AirWatch, along with a strong understanding of mobile device management, enterprise security, Public Key Infrastructure (PKI), and DoD security compliance requirements.

This individual will play a key role in managing enterprise mobility and endpoint environments, supporting secure device deployments, troubleshooting complex technical issues, and providing technical guidance to junior engineers and government personnel.

Key Responsibilities

• Architect, deploy, configure, and upgrade Omnissa Workspace ONE UEM, Access, Intelligent Hub, and Tunnel across enterprise environments.
• Manage the full device lifecycle for iOS/iPadOS, Android Enterprise (including Samsung Knox), Windows 11, and macOS devices, including enrollment, configuration profiles, compliance policies, application management, and device retirement.
• Integrate Apple Business Manager and Automated Device Enrollment, Android Zero-Touch Enrollment, and Samsung Knox Mobile Enrollment.
• Implement and support CAC/PIV-based authentication, derived credentials (including DoD Purebred), and certificate authority integrations.
• Apply, configure, and validate DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) across mobile and endpoint platforms.
• Develop and maintain technical documentation and compliance evidence to support Risk Management Framework (RMF), Authority to Operate (ATO), ACAS, and CCRI/CORA inspections.
• Integrate Workspace ONE with enterprise identity services, including Microsoft Entra ID, Active Directory, and LDAP, as well as PKI, SIEM, and Zero Trust security controls.
• Troubleshoot and resolve complex Tier III technical issues involving endpoint management, authentication, device enrollment, connectivity, and security configurations.
• Develop technical runbooks, standard operating procedures (SOPs), and knowledge articles to support ongoing operations and maintenance.
• Mentor junior engineers and lead knowledge-transfer sessions for government staff and technical teams.
• Provide technical briefings, project updates, risk assessments, and recommendations to government leadership and PGTEK program management.

• Active Secret Security Clearance.
• DoD 8140 (formerly DoD 8570) compliant baseline certification at IAT Level II, such as CompTIA Security+ CE or higher.
• At least 7 years of experience in enterprise IT, including 5+ years of hands-on experience administering Omnissa Workspace ONE / VMware AirWatch UEM in an enterprise environment supporting 5,000+ devices.
• Extensive experience with enterprise mobile device management, particularly iOS and Android Enterprise.
• Working knowledge of modern endpoint management for Windows 11 and macOS.
• Hands-on experience implementing and maintaining DISA STIGs in a DoD or federal government environment.
• Strong understanding of PKI, certificate-based authentication, and CAC/PIV authentication workflows.
• Experience integrating enterprise endpoint management platforms with identity management and security infrastructure.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills, with the ability to brief senior military and civilian leadership.

Preferred Qualifications

• Omnissa or legacy VMware Workspace ONE certifications, such as VCP-DW or Omnissa Certified Professional – UEM.
• Experience supporting Workspace ONE in FedRAMP High or DoD Impact Level (IL) environments.
• Familiarity with NIPRNet and SIPRNet environments.
• Experience with Omnissa Horizon (VDI) and Workspace ONE Intelligence.
• Previous Air Force, Air Mobility Command, or Joint Base Andrews mission partner experience.
• Scripting and automation experience using PowerShell, REST APIs, and/or Python.
• Advanced security certifications such as CISSP, CASP+, or equivalent.
• Bachelor's degree in Information Technology, Computer Science, or a related discipline. Equivalent professional experience may be considered.

Additional Information

• Work Location: Joint Base Andrews, Maryland.
• Work Arrangement: Fully onsite.
• Security Requirement: Active Secret clearance required.
• Compensation: $135,000–$165,000 annually, depending on experience and qualifications.
• Relocation Assistance: Available for qualified candidates.

PGTEK offers a competitive compensation package and the opportunity to work on mission-critical technology initiatives supporting the Department of Defense.

Our comprehensive benefits package for full-time salaried employees is effective immediately upon the start date. Benefits include comprehensive PPO medical coverage with access to a Health Savings Account (HSA) option, a vision plan, and dental insurance with the base dental plan option paid for by PGTEK. Life Insurance, Short and Long-Term disability, and Critical Illness insurance have premiums covered. Additionally, PGTEK offers a matching 401(k) plan and a discount on pet insurance through ASPCA Pet Insurance. An Employee Assistance Program is available at no cost to all employees. PGTEK offers a generous amount of PTO and Holidays, and an Education Assistance Program is available after 12 months of employment.

ABOUT PGTEK

PGTEK is a true consulting organization dedicated to helping clients achieve their business and technology objectives utilizing our decades of experience and business relationships. PGTEK invests in the educational advancements of our staff by providing the necessary resources to complete Professional and Business Certifications. Our company is our people, and we treat them like family.

EOE, including disability/veterans