Workstation Endpoint Engineer II

jobr.pro; Rockville (MD); On-site; USD 60,000 - 70,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

401(k) with employer match

paid time off

professional development opportunities

Job summary

A-TEK, Inc. in Rockville, MD seeks a mid-level Workstation Endpoint Engineer II to support a Federal customer. The role focuses on OS deployments, software delivery automation, and strict endpoint compliance across Windows and macOS workstations.

On-site position requiring ability to obtain public trust clearance. You will manage Intune/SCCM/Jamf Pro, develop images, automate tasks with PowerShell, enforce security policies, and provide Tier 3 engineering support in a highly regulated

Qualifications

• 3–5 years of dedicated experience in enterprise desktop engineering, systems administration, or unified endpoint management.
• Hands-on administration experience with Microsoft Intune, SCCM, or Jamf Pro.
• Proficiency with PowerShell for automation and environment configuration.
• Familiarity with federal hardening guidelines, such as NIST standards, STIG compliance, or CIS benchmarks.
• Bachelor’s degree in a relevant field or equivalent technical certifications (e.g., Microsoft Certified: Endpoint Administrator Associate).

Responsibilities

• Endpoint Management & MDM: Administer and optimize unified endpoint management tools like Microsoft Intune or SCCM/MECM to manage Windows and macOS devices.
• OS Deployment & Provisioning: Develop, test, and maintain enterprise operating system images and modern provisioning profiles (e.g., Windows Autopilot).
• Automation & Scripting: Write and maintain PowerShell or Bash scripts to automate routine deployment tasks, application packaging, and configuration changes.
• Security & Compliance: Implement and enforce endpoint security policies, including patch management, antivirus definitions, encryption settings (BitLocker/FileVault), and vulnerability remediation.
• Asset Tracking & Logistics: Monitor endpoint health, manage software license distributions, and ensure hardware asset lifecycles align with configuration management data.
• Tier 3 Engineering Support: Act as the escalation point for complex technical issues relating to workstation performance, network connectivity, and core business software.

Skills

PowerShell

Intune admin

SCCM/MECM

Jamf Pro

Federal compliance

Education

Bachelor's degree

Microsoft Endpoint Administrator Associate

Job description

Job Overview

Team A-TEK is seeking a motivated Workstation Endpoint Engineer II to support our Federal Customer in Montgomery, MD. This mid‑level role focuses on optimizing operating system deployments, automating software delivery, and ensuring strict endpoint compliance across all physical and virtual workstations. The position is on-site in Rockville, MD and requires the ability to obtain and retain a public trust level clearance.

Responsibilities and Duties

• Endpoint Management & MDM: Administer and optimize unified endpoint management tools like Microsoft Intune or SCCM/MECM to manage Windows and macOS devices.
• OS Deployment & Provisioning: Develop, test, and maintain enterprise operating system images and modern provisioning profiles (e.g., Windows Autopilot).
• Automation & Scripting: Write and maintain PowerShell or Bash scripts to automate routine deployment tasks, application packaging, and configuration changes.
• Security & Compliance: Implement and enforce endpoint security policies, including patch management, antivirus definitions, encryption settings (BitLocker/FileVault), and vulnerability remediation.
• Asset Tracking & Logistics: Monitor endpoint health, manage software license distributions, and ensure hardware asset lifecycles align with configuration management data.
• Tier 3 Engineering Support: Act as the escalation point for complex technical issues relating to workstation performance, network connectivity, and core business software.

Required Qualifications

• 3–5 years of dedicated experience in enterprise desktop engineering, systems administration, or unified endpoint management.
• Hands‑on administration experience with Microsoft Intune, SCCM, or Jamf Pro.
• Demonstrated proficiency with PowerShell for automation and environment configuration.
• Familiarity with federal hardening guidelines, such as NIST standards, STIG compliance, or CIS benchmarks.
• Bachelor’s degree in a relevant field or equivalent technical certifications (e.g., Microsoft Certified: Endpoint Administrator Associate).

Preferred Qualifications

• Experience managing virtualized environments (e.g., Azure Virtual Desktop, VMware Horizon).
• Prior experience supporting federal agencies (such as the NIH or FDA) under formal project management structures.

Technical Skills

• Microsoft Intune & SCCM/MECM administration.
• macOS & iOS management using Jamf Pro.
• Automated device provisioning via Windows Autopilot.
• PowerShell and Bash scripting for automation.
• Application packaging using MSI/EXE silent deployment.
• OS update management with Windows Update for Business.
• Third‑party software patching and vulnerability remediation.
• EDR deployment via Defender for Endpoint or CrowdStrike.
• Virtualization management using Azure Virtual Desktop or VMware.

Compensation

$60,000 – $70,000 annually (commensurate with experience).

Benefits

Health, dental, and vision insurance; 401(k) with employer match; paid time off; professional development opportunities.

Equal Opportunity Statement

A-TEK, Inc. is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or status as a qualified individual with a disability, or Vietnam era or other protected Veteran status.