Endpoint / Service Desk Engineer

Job Title: Endpoint / Service Desk Engineer

Location: Washington, DC 20105 | Ashburn, VA 20147 | Manassas, VA 20109

Duration: 3-Year Contract

Work Authorization: (Active Top Secret Clearance Required)

Job Summary

The State of Washington D.C. Congressional Budget Office (CBO) is seeking an experienced Endpoint / Service Desk Engineer to support enterprise endpoint engineering, workstation imaging, device lifecycle management, endpoint security, and automation initiatives. The engineer will design, implement, and maintain secure Windows and macOS environments while supporting endpoint compliance, patch management, device enrolment, logging, and security monitoring within a highly secure enterprise environment.

Key Responsibilities

• Design, build, and maintain secure Windows and macOS workstation images.
• Manage endpoint lifecycle including provisioning, enrolment, deployment, and decommissioning.
• Administer Microsoft Intune, Windows Autopilot, JAMF, Ivanti, and KACE.
• Perform operating system and application patch management.
• Implement endpoint security baselines and configuration standards.
• Configure password less authentication, MFA, and hardware security keys (YubiKeys/CAC).
• Support VDI environments for remote and onsite users.
• Configure endpoint logging, monitoring, and SIEM integrations.
• Maintain endpoint compliance and audit readiness.
• Troubleshoot endpoint engineering issues and support escalated Service Desk incidents.
• Create technical documentation, SOPs, runbooks, and knowledge transfer materials.
• Support change management, validation, and deployment activities.

Required Skills

• Windows Endpoint Engineering
• macOS Administration
• Microsoft Intune
• Windows Autopilot
• JAMF Pro
• Ivanti
• KACE
• Endpoint Imaging & Deployment
• OS & Application Patch Management
• Windows Group Policy (GPO)
• Device Lifecycle Management
• VDI Support
• Active Directory / Microsoft Entra ID
• Password less Authentication
• YubiKey / CAC Authentication
• Endpoint Security
• Endpoint Compliance
• SIEM / EDR Logging
• Windows Event Logs
• macOS Unified Logs
• Configuration Management
• Automation & Scripting
• Asset Inventory Management
• Documentation & Runbooks
• Change Management

Preferred Skills

• Microsoft Sentinel or other SIEM platforms
• Microsoft Entra ID
• PowerShell
• Windows Security
• macOS Security
• Cybersecurity Engineering
• Enterprise Endpoint Management
• Incident Response
• Audit & Compliance

Required Experience

• 8+ years of Information Technology, Endpoint Engineering, or Cybersecurity experience.
• 6+ years of enterprise endpoint engineering experience.
• Hands-on experience with Microsoft Intune, Windows Autopilot, Ivanti, KACE, and JAMF.
• Experience with endpoint imaging, deployment, patching, and automation.
• Experience supporting enterprise Windows and macOS environments.
• Experience with SIEM/EDR logging, monitoring, and audit readiness.
• Experience working within enterprise change management and security governance processes.

Required Clearance

• Active Top Secret (TS) Clearance.

Preferred Education

• Bachelor s degree in information technology, Computer Science, Cybersecurity, or a related field (or equivalent experience).