Endpoint Engineer

Project Manager – Digital Modernization Sector (DES) – DISA

The Leidos Digital Modernization Sector has a career opportunity for a Project Manager to join our dynamic DES (Defense Enclave Services) team supporting DISA at Fort Meade, MD on a hybrid basis.

The Defense Enclave Services contract will unify the DoD Fourth Estate Defense Agencies and Field Activities’ (DAFAs) common use information technology systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization program office. It will unify the DAFAs on a common, modernized network architecture, DoDNet, to provide mission services focused on enhanced user experience, improved security, and network reliability.

Must have an ACTIVE SECRET or above clearance required. (US Citizenship required)

As an Endpoint Engineer you will focus on endpoint designs, deploys, and secure end-user devices (workstations, laptops) using tools like Intune, MCM, SCCM. Ensure proper OS images are deployed to all endpoint devices, test and manage software updates, ensure appropriate and enforce security policies (EDR/AV), and automate workflows to ensure stable, compliant, and efficient computing environments for endpoint migrations.

• Endpoint Management & Provisioning: Managing the lifecycle of devices—including imaging, configuration, and decommissioning—using tools like Intune, SCCM/MECM, or Jamf.
• Security & Patch Management: Designing and enforcing endpoint security baselines, ensuring timely OS and application patching, and managing EDR/AV software.
• Automation & Scripting: Using Power Shell, Python, or bash to automate software deployment, configuration changes, and compliance remediation.
• Application Packaging: Oversee application rationale and ensure proper preparation for deploying software applications at scale to Windows environments.
• Troubleshooting & Support: Acting as an escalation point for complex technical issues relating to endpoints that cannot be resolved by standard IT support.
• Compliance & Reporting: Monitoring device health and security compliance, maintaining documentation, and ensuring adherence to security policies (e.g., NIST, DISA STIGs).

• Experience: BA Degree and 4+ years of experience. Additional experience may be accepted in lieu of degree.
• Tools: Deep knowledge of Microsoft Intune, MECM (SCCM), Active Directory, and Group Policy.
• 8140 Certification required.
• Security Knowledge: Familiarity with endpoint security tools.

$87,100.00 - $

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.