Workstation Endpoint Engineer II

Workstation Endpoint Engineer II

A-TEK is seeking a motivated Workstation Endpoint Engineer II to support a federal customer in Montgomery, MD. The role, located on site in Rockville, MD, focuses on designing, deploying, securing, and continuously managing the enterprise workstation environment for a federal client.

• Endpoint Management & MDM: Administer and optimize unified endpoint management tools such as Microsoft Intune or SCCM/MECM to manage Windows and macOS devices.
• OS Deployment & Provisioning: Develop, test, and maintain enterprise operating system images and modern provisioning profiles (e.g., Windows Autopilot).
• Automation & Scripting: Write and maintain Power Shell or Bash scripts to automate deployment tasks, application packaging, and configuration changes.
• Security & Compliance: Implement and enforce endpoint security policies, including patch management, antivirus definitions, encryption settings (Bit Locker/File Vault), and vulnerability remediation.
• Asset Tracking & Logistics: Monitor endpoint health, manage software license distributions, and align hardware asset life cycles with configuration management data.
• Tier 3 Engineering Support: Serve as the escalation point for complex technical issues related to workstation performance, network connectivity, and core business software.

• Experience: 3–5 years of dedicated experience in enterprise desktop engineering, systems administration, or unified endpoint management.
• Technical Stack Proficiency: Hands‑on administration of Microsoft Intune, SCCM, or Jamf Pro.
• Scripting
  
  Skills:
  
  Proficiency with Power Shell for automation and environmental configuration.
• Security Frameworks: Familiarity with federal hardening guidelines (e.g., NIST standards, STIG compliance, CIS benchmarks).
• Education &
  
  Certifications:
  
  Bachelor’s degree in a relevant field or equivalent technical certifications (e.g., Microsoft Certified: Endpoint Administrator Associate).

• Experience managing virtualized environments (e.g., Azure Virtual Desktop, VMware Horizon).
• Prior support of federal agencies (e.g., NIH, FDA) under formal project management structures.

• Automated device provisioning via Windows Autopilot.
• Power Shell and Bash scripting for automation.
• OS update management with Windows Update for Business.
• Third‑party software patching and vulnerability remediation.
• EDR deployment via Defender for Endpoint or Crowd Strike.

Salary Range: $60,000 – $70,000 annually (commensurate with experience).
Benefits: Health, dental and vision insurance; 401(k) with employer match; paid time off; professional development opportunities.

A-TEK, Inc. is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or status as a qualified individual with a disability, or Vietnam era or other protected Veteran status.