Endpoint Engineer (Senior)

DecisionPoint seeks an Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities supporting the USMEPCOM ENLIST program. This senior engineering position owns endpoint images, application packaging, device provisioning, software deployment, endpoint patching, configuration baselines, and Virtual Desktop Infrastructure engineering. 

The Endpoint Engineer develops standardized, repeatable, and secure endpoint solutions for geographically dispersed users and locations. The engineer supports physical and virtual endpoints throughout their lifecycle, including design, testing, deployment, configuration, patching, troubleshooting, refresh, recovery, and retirement. 

This position works closely with the Task 6 cybersecurity team while maintaining a clear division of responsibility. Task 6 identifies, prioritizes, and validates security findings. The Endpoint Engineer evaluates operational impacts and implements the approved endpoint configuration, software, image, patch, or remediation changes through established change-control procedures. The engineer then provides deployment and completion evidence for cybersecurity validation. 

The Endpoint Engineer collaborates with the Service Desk, field support, Active Directory, virtualization, cloud, network, application, cybersecurity, and Government teams. This position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, critical incident support, on-site work, or travel may be required. 

Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid. 

The Endpoint Engineer will: 

• Serve as the senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities. 

• Design, build, test, maintain, and document standardized endpoint images. 

• Maintain image components, drivers, firmware dependencies, operating-system settings, security baselines, required software, and deployment configurations. 

• Establish image versioning, testing, approval, rollback, release, and retirement procedures. 

• Validate endpoint images against functional, security, performance, compatibility, and operational requirements. 

• Develop and maintain automated deployment task sequences, provisioning workflows, configuration profiles, and enrollment processes. 

• Engineer and support endpoint deployment using approved Microsoft and Government management platforms. 

• Support modern endpoint-management and co-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies. 

• Develop, test, maintain, and deploy application packages using approved formats and packaging standards. 

• Package commercial, Government, and internally developed software for controlled endpoint deployment. 

• Develop installation, detection, dependency, requirement, upgrade, repair, and removal logic for software packages. 

• Test application packages for silent installation, proper detection, compatibility, security, user experience, and clean removal. 

• Troubleshoot failed installations, package conflicts, missing dependencies, detection problems, and deployment errors. 

• Develop approved scripts and automation for packaging, provisioning, configuration, deployment, validation, and remediation. 

• Maintain endpoint-management automation in approved version-control and documentation repositories. 

• Design and administer endpoint patching processes for operating systems, approved applications, drivers, firmware, and management components. 

• Establish deployment rings, pilot groups, production waves, maintenance windows, deadlines, exception handling, and rollback procedures. 

• Test operating-system updates, security patches, vendor patches, and application updates before production deployment. 

• Monitor deployment progress, failure rates, compliance status, endpoint health, and outstanding exceptions. 

• Investigate failed patches and coordinate corrective actions, redeployment, or approved exceptions. 

• Engineer and support Virtual Desktop Infrastructure capabilities. 

• Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, policies, and endpoint-access requirements. 

• Monitor and troubleshoot VDI performance, availability, login, profile, application, display, peripheral, and connectivity issues. 

• Support VDI modernization, capacity planning, testing, deployment, and optimization. 

• Coordinate VDI platform dependencies with virtualization, storage, network, identity, application, and cybersecurity teams. 

• Support enterprise endpoint deployment and refresh projects across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP sites, and remote users. 

• Develop technical implementation plans for device refreshes, operating-system upgrades, application migrations, and endpoint-management transitions. 

• Support endpoint provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement. 

• Provide Tier 3 and Tier 4 engineering support for complex endpoint, application-packaging, deployment, patching, and VDI incidents. 

• Analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence. 

• Develop corrective actions for recurring endpoint incidents and known errors. 

• Support major incidents and outages involving endpoint management, software deployments, VDI, or widespread device failures. 

• Implement approved workarounds and service-restoration actions during endpoint-related incidents. 

• Coordinate with the Service Desk and field-support teams to improve endpoint troubleshooting, escalation, and knowledge content. 

• Create technical guidance for common endpoint, deployment, packaging, and VDI problems. 

• Review Task 6 cybersecurity findings assigned to endpoint operations. 

• Assess the operational impact, dependencies, testing requirements, deployment approach, and rollback needs for assigned security changes. 

• Implement approved endpoint security changes through established change-management and release procedures. 

• Execute approved remediation involving endpoint images, software versions, patches, configurations, policies, or management settings. 

• Maintain evidence showing the affected population, deployment method, implementation status, failures, exceptions, and completion results. 

• Provide remediation evidence to Task 6 for validation and closure. 

• Coordinate unresolved or technically infeasible remediations with cybersecurity, system owners, vendors, and Government stakeholders. 

• Apply approved DISA Security Technical Implementation Guides and endpoint-security baselines. 

• Support endpoint compliance reporting, vulnerability remediation, configuration validation, and audit-evidence collection. 

• Maintain endpoint inventories, deployment records, configuration baselines, package records, patch status, VDI documentation, and technical diagrams. 

• Develop and maintain standard operating procedures, field guides, packaging standards, test plans, implementation plans, rollback plans, and recovery procedures. 

• Follow approved incident, problem, change, release, configuration, asset, security, and quality-management processes. 

• Provide endpoint health, deployment, patching, compliance, risk, issue, and modernization information for operational and program reporting. 

Required Qualifications 

Candidates must meet all of the following requirements: 

• Active Secret clearance or higher. 

• Bachelor’s degree in information technology, information systems, or a related field, or equivalent professional experience where permitted by the applicable labor category. 

• Minimum of eight years of relevant experience in endpoint engineering, systems engineering, device management, desktop engineering, VDI engineering, or a related technical discipline. 

• Experience designing and maintaining enterprise endpoint images. 

• Experience developing, testing, and deploying application packages. 

• Experience supporting enterprise endpoint provisioning, deployment, patching, configuration, and lifecycle management. 

• Experience engineering or supporting Virtual Desktop Infrastructure. 

• Experience implementing approved endpoint-security or vulnerability-remediation changes. 

• Experience troubleshooting complex endpoint, deployment, packaging, patching, or VDI issues. 

• Knowledge of controlled testing, pilot deployment, phased implementation, validation, rollback, and change-management practices. 

• Ability to develop technical procedures, image documentation, package records, test plans, deployment plans, rollback procedures, and completion evidence. 

• Microsoft 365 Certified: Endpoint Administrator Associate certification when relevant to the assigned Microsoft 365 or Intune environment. 

• Ability to support after-hours maintenance, deployment windows, critical incidents, and endpoint recovery when required. 

• Strong written, verbal, analytical, and technical problem-solving skills. 

Preferred Qualifications 

The following qualifications are preferred but are not required: 

• Experience with Microsoft Intune or Microsoft Endpoint Manager. 

• Experience with Microsoft Configuration Manager or System Center Configuration Manager. 

• Experience with Windows Autopilot and modern device provisioning. 

• Experience with Microsoft Defender for Endpoint. 

• Experience with Microsoft Entra ID and hybrid endpoint management. 

• Experience with PowerShell, Microsoft Graph, or other endpoint-automation technologies. 

• Experience packaging applications using MSI, MSIX, Win32, App-V, or comparable formats. 

• Experience with VMware Horizon, Azure Virtual Desktop, Windows 365, Citrix, or another enterprise VDI platform. 

• Experience supporting federal or Department of Defense endpoint environments. 

• Experience applying DISA Security Technical Implementation Guides to Windows endpoints. 

• Experience supporting Risk Management Framework controls, vulnerability remediation, or authorization evidence. 

• Experience with endpoint analytics, digital employee experience, compliance, or configuration-management tools. 

• Experience supporting large-scale operating-system migrations, device refreshes, or endpoint-management modernization. 

• CompTIA Security+ or another relevant security certification. 

• ITIL v4 Foundation certification. 

• Relevant Microsoft, VMware, Citrix, cloud, automation, or endpoint-management certification. 

Skills and Competencies 

• Enterprise endpoint engineering and lifecycle management. 

• Image engineering and automated deployment. 

• Application packaging and software distribution. 

• Operating-system and application patch management. 

• Endpoint configuration and security-baseline implementation. 

• VDI design, deployment, and troubleshooting. 

• PowerShell and endpoint-management automation. 

• Complex troubleshooting and root-cause analysis. 

• Controlled testing, phased deployment, and rollback planning. 

• Cybersecurity remediation execution and evidence development. 

• Technical documentation and configuration management. 

• Cross-functional engineering coordination. 

• Strong attention to detail and change discipline. 

• EEO and Affirmative Action Policy: DecisionPoint Corporation is an Equal Employment Opportunity and Affirmative Action employer. It is the policy of DecisionPoint Corporation to provide equal employment opportunity in accordance with all applicable Equal Employment Opportunity/Affirmative Action laws, directives and regulations to all employees and qualified applicants without regard to race, ethnicity, color, religion, national origin, sex, age, disability status, pregnancy, sexual orientation, gender identity, genetic information, protected veteran status, or any other protected status under Federal, State or Local laws.
• Pay Transparency Policy: In accordance with Presidential Executive Order 13665, DecisionPoint Corporation will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.
• Authorization to Share Resume and Personal Information: By expressing your interest and submitting your resume for this position, you authorize DecisionPoint Corporation to share your resume, as well as personal information included on the resume, with its subsidiaries, affiliates and teaming partners for the purpose of considering you for this position and other available positions requiring comparable skills, education and experience. Should DecisionPoint Corporation. or its affiliates and teaming partners wish to initiate pre-employment discussions, you will be asked to complete an employment application and related employment documents.