Desktop & Windows Engineer

Apply Logic is a fast-paced Service-Disabled Veteran-Owned Small-Business, headquartered in Vienna, VA. Our people are our greatest asset, and our company culture is grounded on that belief. We offer challenging and interesting work in a friendly and supportive environment. Through prime and subcontracts, we deliver best-in-class expertise to solve complex technical problems.

to join our team supporting a complex government client in Columbia, SC
. If that's you, get ready to bring your expertise in robust solutions for large-scale deployment of software using OS deployment technologies. As the SME, you will develop and implement Desktop OS Images.

Hybrid – A mix of onsite and remote work.

Must be US citizen with the ability to obtain a Public Trust security clearance.

• Apply expert level knowledge to utilization of the following tools:
  
  Microsoft Endpoint Configuration Manager (MECM), Microsoft Deployment Toolkit (MDT), and Configuration Manager Operating System Deployment (OSD).
• Develop, test, and implement software distribution packages, to include updates to software applications to be applied to desktops, laptops, tablets, and servers used within the enterprise.
• Provide information and recommendations to meet various user-based software requirements.
• Demonstrate strong familiarity with scripting languages such as Power Shell and VB script.
• Implement server OS deployment methodologies to include automated server build processes.
• Provide support for an OS patching infrastructure such as HCL Big Fix or Windows Update/MECM that applies mandatory security updates to enterprise systems.
• Analyze, evaluate, and recommend desktop, laptop, tablet, and server hardware.
• Perform security related tasks which include, documentation, vulnerability scan review, assessment support, patch management, and auditing as required.

• Bachelor’s in computer science, business, or other relevant disciplines.
• Ten (10) years of relevant work experience may be substituted for degree requirement.
• Deep knowledge of Windows OS (Windows 11) internals, architecture, and configuration
• Expertise with Active Directory, Group Policy Objects (GPO), OU structure, and domain services
• Strong experience with imaging and deployment tools such as MDT, SCCM/MECM, MECM OSD, Autopilot, and Intune
• Proficiency with device management, compliance policies, configuration profiles, and Windows Update for Business
• Skilled in Power Shell scripting for automation, reporting, and troubleshooting
• Experience managing drivers, firmware, hardware standards, and lifecycle management Knowledge of enterprise networking fundamentals (DNS, DHCP, VPN, certificates)
• Endpoint security:
  Bit Locker, Defender for Endpoint, application control, privilege management
• Patch management and vulnerability remediation
• Monitoring and logging using tools like Event Viewer, Log Analytics, SIEM platforms
• Troubleshooting complex desktop, application, and hardware issues
• Supporting virtualization technologies (VDI, Hyper‑V)
• Experience in programming languages such as C#, Visual Basic with strong knowledge in .NET.

• Deep Power Shell proficiency, including building advanced modules and automating enterprise-scale workflows
• Strong experience with cloud-based endpoint management (Intune, Azure AD, Conditional Access, Defender for Endpoint)
• Expertise with modern provisioning methods (Autopilot, ESP customization, scripted deployments)
• Familiarity with Zero Trust endpoint principles and secure configuration baselines
• Solid understanding of certificate services, PKI, and enterprise certificate management
• Experience with Windows troubleshooting using symbols,…