Service Desk Engineer

Sprymethods; Washington (District of Columbia); On-site; USD 90,000 - 120,000; Full time

Job summary

Sprymethods is looking for a Service Desk Engineer to support advanced endpoint engineering tasks including secure workstation images, patching, and lifecycle management. The position requires a minimum of eight years in IT, with specific experience in endpoint engineering, and a Top Secret (TS) security clearance.

Ideal candidates will have experience with Windows and macOS environments, and a Bachelor's degree in IT or cybersecurity. This role focuses on engineering support for escalated issues rather than routine help desk support.

Qualifications

• Eight years of experience in IT, endpoint engineering, or cybersecurity.
• Six years of engineering experience in enterprise environments.
• Experience with workstation imaging, automation, patch management, and audit readiness.

Responsibilities

• Design, implement, and maintain secure workstation images for Windows and macOS.
• Engineer and maintain patching and deployment workflows.
• Support Microsoft Intune registration and hardware-backed credentials.

Skills

Endpoint engineering

Cybersecurity

Workstation imaging

Automation

Patch management

Education

Bachelor's degree in information technology or cybersecurity

Job description

Who We’re Looking For (Position Overview)

The Service Desk Engineer supports advanced endpoint engineering work for secure workstation images, patching, enrollment, telemetry, baseline configuration, lifecycle management, and remediation of escalated issues. This work focuses on engineering support for complex or escalated tickets rather than routine Tier 1 help desk support.

Responsibilities

• Design, implement, and maintain secure workstation images for Windows and macOS supporting on-site, remote, and virtual desktop infrastructure (VDI) access.

• Engineer and maintain patching, version control, deployment workflows, and remediation of configuration drift using approved endpoint management tools.

• Support Microsoft Intune registration, Windows Autopilot, hardware‑backed credentials, and approved authentication methods.

• Implement and maintain logging, monitoring, and audit capabilities for device enrollment, user authentication, network access, and endpoint behavior.

• Maintain device enrollment workflows, asset tracking, recovery key processes, and onboarding and offboarding checklists.

• Produce runbooks, validation reports, remediation plans, and knowledge transfer materials.

Qualifications

• Eight years of experience in information technology (IT), endpoint engineering, or cybersecurity.

• Six years of experience performing engineering—not help desk—functions in enterprise environments.

• Experience working under formal change control, audit, and security governance processes.

• Experience with workstation imaging, automation, patch and configuration management, device enrollment, logging, telemetry, and audit readiness.

• Top Secret (TS) security clearance.

• Bachelor's degree in information technology, cybersecurity, related field, or equivalent experience.