Endpoint Engineer (TS Clearance Required) in Washington, DC

Required Qualifications
Active Top Secret (TS) Security Clearance.
U.S. Citizen or Permanent Resident.
Minimum 8 years of experience in Information Technology, Endpoint Engineering, or Cybersecurity.
Minimum 6 years of hands-on engineering experience in enterprise environments.
Experience working within formal change management, audit, compliance, and security governance processes.
Strong verbal and written communication skills with the ability to interact with senior executives.
Ability to meet critical project deadlines.
Required Technical Skills
Endpoint Engineering
Windows and macOS workstation imaging, deployment, and lifecycle management.
Experience creating, maintaining, validating, and securing workstation images.
Integration of endpoint images with VDI, EDR, authentication, and logging solutions.
Device Management & Identity
Microsoft Intune administration and compliance management.
Windows Autopilot deployment and provisioning.
JAMF Pro administration for macOS endpoint management.
Device enrollment, provisioning, asset management, and lifecycle operations.
Passwordless authentication and hardware-backed credential implementation (YubiKey, CAC, security keys).
Patch & Configuration Management
Hands-on experience with Ivanti and/or KACE.
Operating system and application patching.
Configuration management and remediation of configuration drift.
Patch validation, deployment monitoring, and rollback support.
Monitoring & Security Operations
Endpoint logging and telemetry engineering.
Windows Event Logs and macOS Unified Logs.
SIEM/EDR integration and monitoring.
Experience with Microsoft Sentinel or similar security platforms.
Security monitoring, audit readiness, and forensic support.
Automation & Infrastructure
Endpoint deployment automation and scripting.
Image deployment and patch orchestration automation.
Documentation of engineering procedures, runbooks, and operational processes.