[Hiring] Senior Endpoint Engineer @Computer World Services

Role Description

Computer World Services, Corp. (CWS) seeks a Senior Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities for the USMEPCOM ENLIST program.

• Support physical and virtual endpoints throughout their lifecycle across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP locations, and remote users.
• Maintain a clear division of responsibility with cybersecurity personnel.
• Test and implement approved changes through change control and provide deployment evidence for validation.

Key Tasks & Responsibilities

• Serve as senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.
• Design, build, test, and maintain standardized endpoint images, including drivers, OS settings, security baselines, and required software.
• Develop automated deployment task sequences, provisioning workflows, enrollment processes, and configuration profiles using Microsoft Intune, Configuration Manager, Windows Autopilot, or comparable platforms.
• Package commercial, Government, and internally developed software with installation, detection, dependency, upgrade, and removal logic.
• Develop and maintain approved scripts and automation for provisioning, packaging, configuration, and remediation in version-control repositories.
• Design and administer endpoint patching for operating systems, applications, drivers, and firmware.
• Engineer and support VDI base images, desktop pools, application delivery, and user profiles.
• Support endpoint deployment and refresh projects, OS upgrades, application migrations, and endpoint-management transitions.
• Provide Tier 3/Tier 4 engineering support for complex endpoint, packaging, deployment, patching, and VDI incidents.
• Review cybersecurity findings assigned to endpoint operations and implement approved remediation through change and release procedures.
• Maintain endpoint inventories, image and package records, patch status, VDI documentation, SOPs, and deployment and rollback plans.

Qualifications

• Bachelor’s degree in Information Technology, Information Systems, or a related field, or equivalent professional experience.
• Minimum of eight (8) years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related discipline.
• Experience designing and maintaining enterprise endpoint images and developing, testing, and deploying application packages.
• Experience supporting endpoint provisioning, deployment, patching, configuration, lifecycle management, and VDI.
• Experience implementing endpoint-security or vulnerability-remediation changes using controlled testing, phased deployment, validation, and rollback practices.
• Strong written, verbal, analytical, and technical problem-solving skills.

Requirements

• Experience with Microsoft Intune, Configuration Manager, Windows Autopilot, Defender for Endpoint, and Entra ID hybrid endpoint management.
• Experience with PowerShell, Microsoft Graph, or comparable endpoint-automation technologies.
• Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats.
• Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform.
• Experience supporting federal or DoD endpoint environments, including DISA STIGs and RMF remediation evidence.
• Experience supporting large-scale OS migrations, device refreshes, or endpoint-management modernization.

Certifications

• Required: Microsoft 365 Certified: Endpoint Administrator Associate, when relevant to the assigned Microsoft 365 or Intune environment.
• Preferred: CompTIA Security+ or another security certification, ITIL 4 Foundation, or relevant Microsoft, VMware, Citrix, cloud, or automation certification.

Security Clearance

• Active Secret clearance or higher is required.

Other

• Remote position; Chicago, IL–area candidates preferred.
• Occasional after-hours maintenance, deployment windows, critical incident support, on-site work, or travel may be required.