Endpoint Systems Engineer

Everforth ECS is seeking an Endpoint Systems Engineer to work in our Fairfax, VA office.

Everforth ECS is seeking an Endpoint Systems Engineer to support the internal Corporate IT team. The ideal candidate has experience managing endpoints at scale and is comfortable using automation, configuration management, and endpoint-management platforms to maintain security, compliance, and operational reliability.

This role supports four primary technology platforms: macOS, Windows, Linux, and mobile devices. The successful candidate will manage endpoint lifecycle activities across these platforms, with emphasis on automation, patch compliance, configuration management, security hardening, and vulnerability remediation.

This is a hybrid role based in Fairfax, VA. The selected candidate will work onsite with the team three days per week.

Responsibilities

• Administer, patch, and maintain macOS, Windows, Linux, and mobile-device environments using MDM, endpoint-management, and configuration-management tools.

• Deploy operating system, application, and security updates; monitor patch compliance; and remediate systems that fall outside established standards.

• Develop, apply, and maintain endpoint configuration baselines, policies, profiles, and scripts across supported platforms.

• Harden endpoints using configuration profiles, system policies, and automation in alignment with applicable standards and frameworks, including CIS Benchmarks, NIST STIGs, and CMMC requirements.

• Support Linux system administration activities, including package management, patching, baseline configuration, security hardening, and automation.

• Identify, investigate, and remediate endpoint vulnerabilities involving applications, operating systems, insecure configurations, and missing patches.

• Partner with security, infrastructure, and end-user support teams to improve endpoint reliability, user experience, and compliance posture.

• Create and maintain technical documentation, standard operating procedures, and knowledge-base articles.

• Advise leadership and technical stakeholders on endpoint-management policies, procedures, and improvement opportunities.

• Train and support End-User Support Technicians on MDM and endpoint-management tools and processes.

• Follow ITSM practices for documentation, change management, incident response, problem management, and service delivery.

Salary Range: $100,000 - $125,000

General Description of Benefits

• U.S. citizenship.

• Ability to obtain and maintain a DoD Secret clearance.

• Three or more years of experience in endpoint management, systems administration, desktop engineering, or a closely related role.

• Experience managing endpoint fleets through MDM, unified endpoint management, or similar tools.

• Experience supporting macOS, Windows, Linux, and mobile operating environments.

• Familiarity with endpoint patching, configuration management, security baselines, and vulnerability remediation.

• Ability to work independently as a sole contributor while providing sound recommendations on policies, procedures, and technical solutions.

• Working knowledge of ITSM best practices, including documentation, change management, incident response, and problem management.

• Current knowledge of common MDM and endpoint-management platforms and evolving industry practices.

• Ability to communicate effectively with technical and non-technical stakeholders and train End-User Support Technicians.

• Experience with one or more endpoint-management platforms, such as Jamf, Workspace ONE UEM, Microsoft Intune, Microsoft Configuration Manager/SCCM, NinjaOne, or similar tools.