Systems Administration Endpoint Engineering

Alpha Omega; San Antonio (TX); On-site; USD 88,000 - 114,000; Full time

Benefits offered by this job

PTO including paid parental, military,

Health and Dental Insurance

401(k) with match

Tuition & Professional Development Rei

HSA/FSA

Job summary

Alpha Omega in San Antonio, TX is seeking a Systems Administration Endpoint Engineer to deliver engineering, architecture, and Tier 3/4 support for the MHS hybrid environment, focusing on application integration, security, desktop engineering, and monitoring.

You will design and maintain centralized endpoint management, test deployments for baseline OS, ensure compliance with DoD/DHA policies, and support migration toward cloud-based endpoint solutions; requires active clearance and a BS degree.

Qualifications

• BS degree in IT, cybersecurity, information systems or CS from ABET/CAE program.
• 3+ years of relevant experience in systems engineering or endpoint management.
• Active Secret (or higher) clearance required.

Responsibilities

• Provide engineering, architectural, and Tier 3/4 expertise for MHS hybrid endpoint environments.
• Engineer and test endpoint packages and baseline OS configurations for both on-prem and cloud deployments.
• Ensure compliance with IA, RMF/NIST standards and DoD/DHA policies across endpoints.
• Support desktop/endpoint engineering, security tooling, and reporting in the enterprise.

Skills

Active Secret Clearance

3+ years of relevant experience

Education

BS degree in Information Technology / Cybersecurity / CS (ABET/CAE)

Job description

Description

Systems Administration Endpoint Engineering

Onsite; San Antonio, TX

• Provide engineering, architectural, and Tier 3/4 expertise to deliver forward-looking, compliant, solutions for the MHS hybrid environment in support of standard Application Integration, Application Security, Desktop Engineering, and Service Monitoring functions that enable management to the endpoint. Develop and engineer a standard framework for centrally deploying and supporting applications and systems within the DHA hybrid production environment and provide a common system and monitoring framework and capability used by other teams to maintain applications, services, and systems.
• Application Integration – Engineer packages and test software that supports the baseline OS for virtual and physical endpoints throughout the DHA environment, including standardized administration, security, and monitoring suite. Application packaging, deployment support and configurations of baseline endpoint applications. Architect, design, and support centrally managed endpoint architecture adherent to DoD/DHA policies, tools and procedures used to maintain the DHA environment. Engineer, architect, design, configure and maintain Enterprise Management solutions and appropriate engineering and architecture packages and drawings as needed by the environment. Engineer, architect, design, support and troubleshoot endpoint management tools, infrastructure, and agents on-premise, in the cloud and SaaS as appropriate to deliver and maintain endpoints, applications, services, hotfixes, patches and tools in support of the enterprise medical mission. Develop, maintain, and adjust methodologies, standards, and packages in support of forward-looking objectives to transition from on-premise, cloud, and SaaS use cases as appropriate. Develop new processes for upgrading, transitioning, and/or migrating MECM enterprise packages for use in Intune. Design, recommend, and develop new reporting processes in support of MHS/DHA mission.
• Endpoint and Identity Security - Validate compliance with IA controls and cybersecurity best practices for baseline applications, products, solutions, endpoints, and operating systems informed by DoDI 8510.01, RMF for DoD Information Systems. Perform security risk analyses and assessments of systems and applications throughout the application and system engineering life cycle with appropriate tools, guidelines, and policy, such as identifying security vulnerabilities and mitigation techniques using risk management framework process, IA controls, National Institute of Standards and Technology (NIST) standards, policies, procedures, configurations, Zero Trust strategy, Defense-in-depth, and patching. Engineer tools and solutions used to verify and validate IA compliance of the security posture of all systems managed by applicable teams. Ensure compliance with corresponding DISA STIGs. Deliver updates to security configurations of monitoring and compliance tools used in the labs in accordance with DoD cyber security regulations, guidelines, and industry best practices. Validate compliance with security controls used for new or existing applications and systems. Provide IA technical support and guidance as needed to ensure compliance with IA and NIST standards and other pertinent guidance from the concept stages through final solution delivery. Records all IA artifacts, POA&Ms, risk assessments, annual reviews, authorizations to operate, and continuous monitoring evidence within eMASS in support of RMF and Zero Trust strategy compliance.
• Desktop/Endpoint Engineering – Engineer, design, develop and architect the endpoint architecture in support of deployment and consumption throughout the MHS environment. Maintain desktop and Operating System image libraries for the MHS, consisting of all baseline desktop image builds and approved software used throughout the organization. Design, build, and test configuration items such as task sequences, group policy objects, images, applications, and in-place upgrades. Engineer, architect, design, and develop solutions in support of DAR requirements, multi-purpose kiosk requirements, and User Data/Profile Management requirements. Consult, recommend, support, and engineer solutions to manage hardware and peripherals used and purchased by the organization. Test and validate desktop software, packages, configurations, and compatibility of applications for use on DHA managed endpoints. Ensure the DHA standardized endpoint standard is compliant with DoD, DISA, and DHA policies, regulations, guidance, and architectural requirements. Provide engineering, architectural, sustainment and design support to modernize existing configuration items and new cloud managed endpoint solutions with an aim to enhance end-user experience, operating system delivery management, endpoint provisioning, application delivery and maintenance, and baseline configuration standardization.
• Mobile Engineering – Develop, design, engineer, and architect solutions to standardize mobile device delivery, operating system/firmware upgrades, application validation, configuration and testing, device configuration, application and device provisioning, management, security, distribution, authentication, and end-user experience through on-premise, cloud, and SaaS based offerings and tools. Architect, engineer, and develop transition plan for support, continuity, and user experience during migration from other mobile device management solutions and tools.
• Research, design, develop, and test operating systems-level software, compilers, and network distribution software for medical, industrial, military, communications, aerospace, business, scientific, and general computing applications. Set operational specifications and formulate and analyze software requirements. May design embedded systems software. Apply principles and techniques of computer science, engineering, and mathematical analysis.
• All other duties as assigned.

Job Details

Description

Job Title:

Systems Administration Endpoint Engineering

Clearance Required:

Secret

Work Location:

Onsite; San Antonio, TX

Key Responsibilities

• Provide engineering, architectural, and Tier 3/4 expertise to deliver forward-looking, compliant, solutions for the MHS hybrid environment in support of standard Application Integration, Application Security, Desktop Engineering, and Service Monitoring functions that enable management to the endpoint. Develop and engineer a standard framework for centrally deploying and supporting applications and systems within the DHA hybrid production environment and provide a common system and monitoring framework and capability used by other teams to maintain applications, services, and systems.
• Application Integration – Engineer packages and test software that supports the baseline OS for virtual and physical endpoints throughout the DHA environment, including standardized administration, security, and monitoring suite. Application packaging, deployment support and configurations of baseline endpoint applications. Architect, design, and support centrally managed endpoint architecture adherent to DoD/DHA policies, tools and procedures used to maintain the DHA environment. Engineer, architect, design, configure and maintain Enterprise Management solutions and appropriate engineering and architecture packages and drawings as needed by the environment. Engineer, architect, design, support and troubleshoot endpoint management tools, infrastructure, and agents on-premise, in the cloud and SaaS as appropriate to deliver and maintain endpoints, applications, services, hotfixes, patches and tools in support of the enterprise medical mission. Develop, maintain, and adjust methodologies, standards, and packages in support of forward-looking objectives to transition from on-premise, cloud, and SaaS use cases as appropriate. Develop new processes for upgrading, transitioning, and/or migrating MECM enterprise packages for use in Intune. Design, recommend, and develop new reporting processes in support of MHS/DHA mission.
• Endpoint and Identity Security - Validate compliance with IA controls and cybersecurity best practices for baseline applications, products, solutions, endpoints, and operating systems informed by DoDI 8510.01, RMF for DoD Information Systems. Perform security risk analyses and assessments of systems and applications throughout the application and system engineering life cycle with appropriate tools, guidelines, and policy, such as identifying security vulnerabilities and mitigation techniques using risk management framework process, IA controls, National Institute of Standards and Technology (NIST) standards, policies, procedures, configurations, Zero Trust strategy, Defense-in-depth, and patching. Engineer tools and solutions used to verify and validate IA compliance of the security posture of all systems managed by applicable teams. Ensure compliance with corresponding DISA STIGs. Deliver updates to security configurations of monitoring and compliance tools used in the labs in accordance with DoD cyber security regulations, guidelines, and industry best practices. Validate compliance with security controls used for new or existing applications and systems. Provide IA technical support and guidance as needed to ensure compliance with IA and NIST standards and other pertinent guidance from the concept stages through final solution delivery. Records all IA artifacts, POA&Ms, risk assessments, annual reviews, authorizations to operate, and continuous monitoring evidence within eMASS in support of RMF and Zero Trust strategy compliance.
• Desktop/Endpoint Engineering – Engineer, design, develop and architect the endpoint architecture in support of deployment and consumption throughout the MHS environment. Maintain desktop and Operating System image libraries for the MHS, consisting of all baseline desktop image builds and approved software used throughout the organization. Design, build, and test configuration items such as task sequences, group policy objects, images, applications, and in-place upgrades. Engineer, architect, design, and develop solutions in support of DAR requirements, multi-purpose kiosk requirements, and User Data/Profile Management requirements. Consult, recommend, support, and engineer solutions to manage hardware and peripherals used and purchased by the organization. Test and validate desktop software, packages, configurations, and compatibility of applications for use on DHA managed endpoints. Ensure the DHA standardized endpoint standard is compliant with DoD, DISA, and DHA policies, regulations, guidance, and architectural requirements. Provide engineering, architectural, sustainment and design support to modernize existing configuration items and new cloud managed endpoint solutions with an aim to enhance end-user experience, operating system delivery management, endpoint provisioning, application delivery and maintenance, and baseline configuration standardization.
• Mobile Engineering – Develop, design, engineer, and architect solutions to standardize mobile device delivery, operating system/firmware upgrades, application validation, configuration and testing, device configuration, application and device provisioning, management, security, distribution, authentication, and end-user experience through on-premise, cloud, and SaaS based offerings and tools. Architect, engineer, and develop transition plan for support, continuity, and user experience during migration from other mobile device management solutions and tools.
• Research, design, develop, and test operating systems-level software, compilers, and network distribution software for medical, industrial, military, communications, aerospace, business, scientific, and general computing applications. Set operational specifications and formulate and analyze software requirements. May design embedded systems software. Apply principles and techniques of computer science, engineering, and mathematical analysis.
• All other duties as assigned.

Education

Required

Qualifications:

• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET accredited or CAE designated institution

Experience/Skills

• 3+ years of relevant experience
• Active Secret (or above) Clearance

Certification(s)

• CompTIA Security+ or similar (Cloud+ or GICSP or SSCP or GSEC)
• Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Windows Server Hybrid Administrator Associate

Salary And Benefit Information

The likely salary range for this position is $88,000 - $113,785 This is not, however, a guarantee of compensation or salary. There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, education and certifications as well as contract provisions regarding labor categories that are specific to the position and could fall outside of this range.

Application Deadline

July 30, 2026

Benefits

• PTO including paid parental, military, and bereavement leave
• Eleven (11) paid Federal holidays, five of which are floating holidays (as designated by the company’s holiday schedule each year)
• Health and Dental Insurance (including 100% employer paid premiums for employee coverage under the HDHP health plan)
• Life Insurance, STD/LTD term disability coverage, with employer paid premiums
• 401 (k) plan with a match that is 100% vested after you complete two years of service
• FSA/DFSA/HSA flexible benefit plans
• Annual Tuition & Professional Development Reimbursement benefit

Our Company

Alpha Omega is an award-winning solutions provider dedicated to delivering mission-enabling technology and strategic solutions for our customers. Since our founding in 2016, we have grown to over 700