Endpoint Engineer (Microsoft Intune / SCCM)_UCN

DEAR CANDIDATES, CURRENT ROLE FOR THE US CITIZENS ONLY - NO VISA SPONSORSHIP AVAILABLE.

We are looking for a senior Endpoint Engineer to lead enterprise endpoint engineering across Microsoft Intune, SCCM/MECM and Azure for a large U.S. federal environment. You will own device provisioning, application packaging and deployment, patching, compliance and hybrid identity for thousands of Windows desktops and servers. The role combines hands-on engineering with technical leadership: you will design and automate endpoint operations, implement security controls and drive vulnerability remediation through federal IAVA/CYBERCOM processes. You will also mentor less-experienced engineers and act as a trusted technical voice in customer meetings. This is an opportunity for a seasoned Microsoft endpoint specialist who enjoys solving complex problems in a secure, mission-critical setting.

Details:
Schedule: Full time
Location: Hybrid, primarily remote (must live in the DMV area – Washington, DC, Maryland or Virginia – to attend customer meetings)
Start: ASAP
Duration: Long-term
English: Fluent
Type of collaboration: Internal Employment
Citizenship: U.S. citizens only – visa sponsorship is not available
Clearance: Public Trust determination (held or able to obtain)

About the project:
The project supports desktop and endpoint services for a major U.S. federal government agency with a large, distributed workforce. The environment spans Windows 11 desktops, Windows Server infrastructure, VMware virtualization and a hybrid on-premises/Azure identity model. The team is modernizing endpoint management by expanding cloud-based provisioning with Intune Autopilot alongside established SCCM/MECM operations. Security and compliance are central to the mission, with strict federal vulnerability management and patching requirements. You will join an experienced engineering team that values automation, reliability and continuous improvement.

You have:
- U.S. citizenship (no visa sponsorship available) and residency in the DMV area (DC, MD or VA)
- Public Trust determination, or the ability to successfully complete the process
- Bachelor's degree + 13 years of relevant experience
- 5+ years of hands-on SCCM/MECM software packaging and patching
- 5+ years of Intune Autopilot administration
- Strong experience with Intune/SCCM device enrollment, policy management and compliance enforcement
- MDT/SCCM imaging experience: WIM capture, packages, advertisements, task sequences, OSD and queries
- Strong PowerShell automation skills
- Windows Server 2016/2019/2022 and Windows 11 imaging, plus server/desktop troubleshooting
- Active Directory expertise: security groups, OUs, DNS and GPO management
- Solid VMware vCenter knowledge
- Functional Microsoft SQL Server knowledge
- Experience with IAVA processes, including CYBERCOM release, testing, approval and deployment
- Knowledge of networking, VPN and certificate-based authentication
- Microsoft Certified: Endpoint Administrator Associate
- SCCM certification (as specified by the client)

What to do:
- Lead enterprise endpoint engineering across Microsoft Intune, SCCM/MECM and Azure
- Manage device provisioning and enrollment, including Windows Autopilot and OSD/imaging task sequences
- Package, test and deploy applications and software updates across the endpoint estate
- Own patch management and IAVA/CYBERCOM vulnerability remediation – testing, approval and deployment
- Define and enforce compliance and configuration policies through Intune, SCCM and Group Policy
- Manage hybrid identity across Active Directory and Azure, including security groups, OUs, DNS and GPOs
- Automate endpoint operations and reporting with PowerShell
- Support and troubleshoot Windows Server and Windows 11 desktop environments, including VMware-hosted systems
- Implement security controls such as certificate-based authentication and VPN configurations
- Mentor and guide less-experienced engineers, and represent the team in customer meetings in the DMV area