Unified Endpoint Management Engineer

Global-Enterprise-Services,-LL; Fort Meade (MD); Vor Ort; USD 145.000 - 160.000; Vollzeit

Zusammenfassung

Global-Enterprise-Services, LLC in Fort Meade, MD, is seeking a Senior Unified Endpoint Management Engineer to lead design, deployment, and optimization of Intune-driven endpoint management across the DoD environment.

Responsibilities include migrating MECM/AD-joined devices to Azure AD-joined, developing Intune policies, and integrating with Defender for Endpoint and Zero Trust security models. Strong collaboration with security and operations teams is required.

Qualifikationen

• Bachelor’s degree with 4+ years of relevant experience, or Master’s with 2+ years.
• Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
• Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
• Strong proficiency in PowerShell scripting to automate administrative tasks, deployments, and troubleshooting.
• Experience collaborating directly with customers, end users, and stakeholders to gather requirements and deliver technical solutions.
• Excellent communication, organizational, analytical, and problem-solving skills with the ability to manage multiple priorities in a fast-paced environment.
• Working knowledge of Jira and Confluence for project tracking, documentation, and team collaboration.
• Microsoft certifications such as Microsoft Endpoint Administrator Associate or Microsoft 365 Certified: Endpoint Administrator Expert
• Experience with large-scale enterprise migrations to cloud-native endpoint management
• Familiarity with Zero Trust architecture and modern identity/security frameworks
• Experience integrating endpoint management with SIEM/SOC platforms

Aufgaben

• Lead design, architecture, and deployment of Microsoft Intune solutions.
• Migrate MECM/AD-joined devices to Azure AD-joined and Intune-managed.
• Develop and manage Intune policies, compliance profiles, and app deployment.
• Package and deploy applications in Intune with automation and version control.
• Implement Windows provisioning with Intune, Autopilot, ESP.
• Configure WUfB for secure, timely OS patching.
• Collaborate to convert GPOs to Intune controls.
• Coordinate with AD and MECM teams for migration readiness.
• Integrate Intune with Defender, CA, and Zero Trust.
• Enforce endpoint security best practices (encryption, protection, baselines, DLP).
• Support security ops with endpoint telemetry and SIEM/SOC.
• Identify optimization opportunities and drive modern management adoption.
• Document architecture, configurations, and migration strategies.

Kenntnisse

Microsoft Intune

PowerShell

Cloud-native management

Stakeholder comms

Ausbildung

Bachelor's degree

Master's degree

Tools

Jira

Confluence

Azure AD

Intune

SCCM

Jobbeschreibung

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Unified Endpoint Management Engineer

Full Time DISA Headquarters - DC, Fort Meade, MD, US

Salary Range: $145,000.00 To $160,000.00 Annually

GES is seeking a highly skilled Senior Unified Endpoint Management (UEM) Engineer to support the Defense Enclave Services (DES) program - an enterprise-scale digital modernization initiative for the Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies.

In this role, you will lead the design, implementation, and optimization of modern endpoint management solutions, with a primary focus on Microsoft Intune and cloud-native device management. You will play a key role in migrating legacy environments (MECM and on-premises Active Directory) to Azure AD-joined, Intune-managed endpoints, helping drive secure, scalable, and user-centric solutions across the enterprise.

This position requires both deep technical expertise and the ability to collaborate across engineering, security, and operations teams to deliver resilient and compliant endpoint solutions.

Primary Responsibilities

• Lead the design, architecture, and deployment of Microsoft Intune solutions aligned with enterprise security, compliance, and user experience requirements
• Drive endpoint modernization efforts, including migration from MECM and traditional AD-joined devices to Azure AD-joined and Intune-managed environments
• Develop and manage Intune policies and configurations, including compliance policies, configuration profiles, and application deployment strategies
• Package, deploy, and lifecycle-manage applications in Intune, emphasizing automation, version control, and end-user experience
• Architect and implement Windows 10/11 provisioning and deployment solutions using Intune, Autopilot, Enrollment Status Page (ESP), and modern provisioning techniques
• Configure and optimize Windows Update for Business (WUfB) to ensure secure, reliable, and timely OS patching
• Collaborate with infrastructure and identity teams to translate and modernize Group Policy Objects (GPOs) into Intune-based controls (Settings Catalog, ADMX-backed policies)
• Partner with Active Directory and MECM/SCCM teams to ensure coexistence strategies and migration readiness
• Integrate Intune with the broader Microsoft 365 ecosystem, including Defender for Endpoint, Conditional Access, and Zero Trust security models
• Implement and enforce endpoint security best practices, including encryption, endpoint protection, compliance baselines, and data loss prevention
• Support security operations by monitoring endpoint-related incidents and integrating telemetry with SIEM/SOC workflows
• Identify opportunities to optimize endpoint management processes, recommending improvements and driving adoption of modern management capabilities
• Develop and maintain comprehensive technical documentation, including architecture diagrams, configuration standards, and migration strategies

Required Qualifications

• Bachelor's degree with 4+ years of relevant experience, or Master's degree with 2+ years of experience (additional experience may be considered in lieu of degree)
• Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
• Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
• Strong proficiency in PowerShell scripting to automate administrative tasks, streamline deployments, and troubleshoot endpoint issues.
• Experience collaborating directly with customers, end users, and stakeholders to gather requirements, provide project updates, and deliver technical solutions.
• Excellent communication, organizational, analytical, and problem-solving skills with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
• Working knowledge of Atlassian tools, including Jira and Confluence, for project tracking, documentation, and team collaboration.

Desired Qualifications

• Microsoft certifications such as Microsoft Endpoint Administrator Associate or Microsoft 365 Certified: Endpoint Administrator Expert
• Experience with large-scale enterprise migrations to cloud-native endpoint management
• Familiarity with Zero Trust architecture and modern identity/security frameworks
• Experience integrating endpoint management with SIEM/SOC platforms