Senior Windows Engineer

U.S. Department of Justice; Washington, Baltimore (District of Columbia, MD); On-site; USD 100,000 - 160,000; Full time

Job summary

Marathon TS seeks an experienced Desktop & Windows Engineer to support OS image development and testing across enterprise environments. The role emphasizes Windows OS internals, AD/GPO, imaging tools, and scripting for automation.

Preferred candidates bring Proficiency in Intune/Autopilot, VDI/Hyper-V, and enterprise deployment pipelines, with strong troubleshooting and logging skills to maintain secure, compliant endpoints.

Qualifications

• Requires a Bachelor’s degree or equivalent years of experience.
• Extensive Windows OS knowledge, AD/GPO, and imaging/deployment expertise.
• Strong scripting in PowerShell for automation and reporting.
• Experience with enterprise deployment and endpoint management tools.

Skills

Windows OS internals

AD & GPO

Imaging & deployment tools

PowerShell automation

Device management & policy

Networking fundamentals

VDI/Hyper-V

C# / .NET

Education

Bachelor's degree in CS or related field

10 years experience may substitute degree

Tools

MDT

SCCM/MECM

Autopilot

Intune

ProcMon

WinDbg

Event Viewer

Log Analytics

SIEM

Job description

Marathon TS is seeking an experienced Desktop & Windows Engineer to support technical development and testing of Desktop Operating System (OS) Images.

Required Education, Experience, & Skills

• Bachelors in computer science, business, or other relevant disciplines.
• Ten (10) years of relevant work experience may be substituted for degree requirement.

Anticipated Skill Set:

• Deep knowledge of Windows OS (Windows 11) internals, architecture, and configuration.
• Expertise with Active Directory, Group Policy Objects (GPO), OU structure, and domain services.
• Strong experience with imaging and deployment tools such as MDT, SCCM/MECM, MECM OSD, Autopilot, and Intune.
• Proficiency with device management, compliance policies, configuration profiles, and Windows Update for Business.
• Skilled in PowerShell scripting for automation, reporting, and troubleshooting.
• Experience managing drivers, firmware, hardware standards, and lifecycle management Knowledge of enterprise networking fundamentals (DNS, DHCP, VPN, certificates).
• Daily usage of Gold Disk for operating systems deployment.
• Patch management and vulnerability remediation.
• Monitoring and logging using tools like Event Viewer, Log Analytics, SIEM platforms.
• Troubleshooting complex desktop, application, and hardware issues.
• Supporting virtualization technologies (VDI, Hyper-V).
• Experience in programming languages such as C#, Visual Basic with strong knowledge in .NET.

Preferred Education, Experience, & Skills

• Deep PowerShell proficiency, including building advanced modules and automating enterprise-scale workflows.
• Strong experience with cloud-based endpoint management (Intune, Azure AD, Conditional Access, Defender for Endpoint).
• Expertise with modern provisioning methods (Autopilot, ESP customization, scripted deployments).
• Familiarity with Zero Trust endpoint principles and secure configuration baselines.
• Solid understanding of certificate services, PKI, and enterprise certificate management.
• Experience with Windows troubleshooting using symbols, process monitoring tools, and performance analyzers (ProcMon, WinDbg).

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status").