Senior Virtualization​/Workspace ONE Engineer - Active Secret clearance

Location: Joint Base Andrews, MD (100% Onsite)
Salary Range: $135,000–$165,000 annually
Clearance: Active Secret Security Clearance Required

Position Overview:

PGTEK is seeking an experienced Senior Virtualization Engineer to support a Department of Defense customer at Joint Base Andrews. This role will focus on the architecture, implementation, administration, and optimization of Omnissa Workspace ONE solutions across a complex, secure enterprise environment.

The ideal candidate will bring extensive hands-on experience with Workspace ONE Unified Endpoint Management (UEM), formerly VMware Air Watch, along with a strong understanding of mobile device management, enterprise security, Public Key Infrastructure (PKI), and DoD security compliance requirements.

This individual will play a key role in managing enterprise mobility and endpoint environments, supporting secure device deployments, troubleshooting complex technical issues, and providing technical guidance to junior engineers and government personnel.

• Architect, deploy, configure, and upgrade Omnissa Workspace ONE UEM, Access, Intelligent Hub, and Tunnel across enterprise environments.
• Manage the full device lifecycle for iOS/iPadOS, Android Enterprise (including Samsung Knox), Windows 11, and macOS devices, including enrollment, configuration profiles, compliance policies, application management, and device retirement.
• Integrate Apple Business Manager and Automated Device Enrollment, Android Zero-Touch Enrollment, and Samsung Knox Mobile Enrollment.
• Implement and support CAC/PIV-based authentication, derived credentials (including DoD Purebred), and certificate authority integrations.
• Apply, configure, and validate DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) across mobile and endpoint platforms.
• Develop and maintain technical documentation and compliance evidence to support Risk Management Framework (RMF), Authority to Operate (ATO), ACAS, and CCRI/CORA inspections.
• Integrate Workspace ONE with enterprise identity services, including Microsoft Entra , Active Directory, and LDAP, as well as PKI, SIEM, and Zero Trust security controls.
• Troubleshoot and resolve complex Tier III technical issues involving endpoint management, authentication, device enrollment, connectivity, and security configurations.
• Develop technical runbooks, standard operating procedures (SOPs), and knowledge articles to support ongoing operations and maintenance.
• Mentor junior engineers and lead knowledge-transfer sessions for government staff and technical teams.
• Provide technical briefings, project updates, risk assessments, and recommendations to government leadership and PGTEK program management.

• Active Secret Security Clearance.
• DoD 8140 (formerly DoD 8570) compliant baseline certification at IAT Level II, such as CompTIA Security+ CE or higher.
• At least 7 years of experience in enterprise IT, including 5+ years of hands-on experience administering Omnissa Workspace ONE / VMware Air Watch UEM in an enterprise environment supporting 5,000+ devices.
• Extensive experience with enterprise mobile device management, particularly iOS and Android Enterprise.
• Working knowledge of modern endpoint management for Windows 11 and macOS.
• Hands-on experience implementing and maintaining DISA STIGs in a DoD or federal government environment.
• Strong understanding of PKI, certificate-based authentication, and CAC/PIV authentication workflows.
• Experience integrating enterprise endpoint management platforms with identity management and security infrastructure.
• Strong troubleshooting, analytical, and problem-solving skills.
• Excellent written and verbal communication skills,…