Windows Endpoint Engineer, Senior

LCG, Inc.; Bethesda (MD); On-site; USD 100,000 - 125,000; Full time

Benefits offered by this job

Health insurance

Retirement plan

Paid leave

Professional development

Job summary

LCG, Inc. in Bethesda, MD is seeking a Senior Windows Endpoint Engineer to manage enterprise Windows endpoints using Ivanti EPM, Intune, and IBM BigFix. The role serves as a Tier‑3 escalation point for complex endpoint issues and collaborates with Security and Server teams on imaging, GPOs, and patching.

Candidate will patch, deploy software, and configure endpoints while maintaining robust documentation and training for staff. Strong communication and problem‑solving skills are essential.

Qualifications

• Bachelor's degree in Information Technology, Computer Science, or related field.
• 3–5 years of experience in Windows-based endpoint administration in a medium to large enterprise.
• 3 years of experience with Ivanti products and solutions.
• 1 year of experience with Intune products and solutions.
• 2–3 years of experience with BigFix solutions.
• CompTIA Security+ certification required.
• Excellent communication and customer service skills.
• Hands-on mentorship and training experience.

Responsibilities

• Administer, monitor, and maintain Ivanti Endpoint Manager (EPM), Microsoft Intune, and IBM BigFix across workstations and laptops.
• Monitor system health and performance in Ivanti, Intune, and BigFix.
• Track and manage incidents, service requests, and changes using Ivanti Service Manager and Microsoft Intune.
• Implement Windows and third-party patching with Ivanti and Intune, including testing and compliance reporting.
• Develop and maintain automated patch schedules across platforms for timely remediation.
• Package and deploy applications via Ivanti, Intune, and BigFix; assist server team with imaging and deployment.
• Collaborate with Client Security Team on GPOs and endpoint configurations in Active Directory.
• Serve as Tier-3 escalation point for complex endpoint issues; provide advanced diagnostics and resolution.
• Maintain documentation and provide training on Ivanti and Intune software.

Skills

Endpoint management

Troubleshooting

Communication

Problem solving

Mentorship

Education

Bachelor's degree in IT/CS

Tools

Ivanti Endpoint Manager (EPM)

Microsoft Intune

IBM BigFix

Ivanti Service Manager

Active Directory

Job description

Location: Bethesda, MD

Work Type: Hybrid Work (Minimum 2 days Onsite - Could extend to a higher amount depending on Client Needs)

**Sponsorship:**No sponsorship assistance is available for this position.

Required Clearance: Ability to Obtain Public Trust

**Job Title:**Windows Endpoint Engineer, Senior

**Job Summary:**The Windows Endpoint Engineer, Senior is responsible for managing and maintaining enterprise Windows-based endpoint environments using Ivanti Endpoint Manager (EPM), Microsoft Intune, and IBM BigFix for our NIH client. This role implements patching, application deployment, and system compliance to ensure secure and efficient workstation and laptop operations across the organization. The position serves as a Tier‑3 escalation point, providing expert‑level troubleshooting, root cause analysis, and advanced technical support for complex endpoint issues. Collaboration with the Client Security Team and Server Team is essential to support imaging, Group Policy management, and server patching initiatives. The ideal candidate possesses strong technical proficiency, hands‑on experience with endpoint management platforms, and exceptional problem‑solving and communication skills.

Key Responsibilities:

Endpoint Management and Administration

• Administer, monitor, and maintain Ivanti Endpoint Manager (EPM), Microsoft Intune, and IBM BigFix to ensure comprehensive management of workstations and laptops across the enterprise.
• Monitor system health and performance in Ivanti, Intune, and BigFix.
• Track and manage incidents, service requests, and changes using Ivanti Service Manager, with proven ability and experience executing the same functions through Microsoft Intune.

Patching and Compliance

• Implement Windows and third‑party application patching using Ivanti and Intune, including testing, deployment, and compliance reporting.
• Develop and maintain automated patching schedules across all platforms to ensure timely remediation of vulnerabilities and alignment with security policies.

Application Deployment and Configuration

• Package and deploy applications via Ivanti, Intune, and BigFix, ensuring consistency and reliability across environments.
• Provide assistance to the server team as needed in server image creation and deployment, software package creation and deployment, and server patching.
• Collaborate with the Client Security Team on Group Policy Objects (GPOs), user profiles, imaging, and endpoint configurations within Active Directory.

Support and Troubleshooting

• Serve as the final escalation point for complex end‑user and Windows endpoint issues, providing Tier‑3 technical support with advanced diagnostics, root cause analysis, and expert‑level troubleshooting and resolution.
• Troubleshoot endpoint connectivity, software deployment, and patching issues across distributed environments.

Documentation and Training

• Maintain accurate and up‑to‑date documentation for systems, processes, patching procedures, and configuration standards.
• Facilitate hands‑on training sessions for all staff members on Ivanti and Intune software, ensuring comprehensive understanding and effective usage.

Requirements

• Education: Bachelor's degree in Information Technology, Computer Science, or a related field required; equivalent combination of education and relevant experience may be considered.

• Experience: Minimum of 3--5 years of experience in Windows-based endpoint administration, desktop engineering, or systems management within a medium to large enterprise environment.

• 3 years of experience with Ivanti products and solutions.

• 1 years of experience with Intune products and solutions

• 2 -- 3 years of experience with BigFix products and solutions.

• Certifications :

• CompTIA Security (required)

• Microsoft 365 Certified: Endpoint Administrator Associate (nice to have)

• Hands‑on experience providing mentorship and training.

• Demonstrated expertise in troubleshooting Windows operating systems and executing software patching to ensure system stability and security.

• Experienced in performing server patching and updates to maintain optimal performance and compliance across environments. (preferred)

• Excellent communication and customer service skills.

• Strong problem‑solving skills and attention to detail.

Compensation and Benefits

The projected compensation range for this position is $100,000 to $125,000 per year benchmarked in the Washington, D.C. metropolitan area. Salary at LCG is determined by various factors, including but not limited to role, location, the combination of education/training, knowledge, skills, competencies, certifications, and work experience.

LCG offers a competitive, comprehensive benefits package which includes health insurance options (medical, dental, vision), life and disability insurance, retirement plan contributions, as well as paid leave, federal holidays, professional development, and lifestyle benefits.

Devoted to Fair and Inclusive Practices

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

Use of Artificial Intelligence in Recruiting

LCG may use artificial intelligence (AI) and other automated technologies to support portions of the recruiting and hiring process, including resume review, candidate matching, interview scheduling, skills assessment, and other administrative functions. AI-assisted tools are used solely to support our hiring process and do not independently determine employment outcomes. Final hiring decisions are made by trained hiring professionals following a comprehensive review of each candidate's qualifications. We are committed to equal employment opportunity and strive to ensure our hiring practices are fair, transparent, and compliant with applicable laws. Applicants needing a reasonable accommodation during the application or interview process should contact Human Resources.