Microsoft Systems SME

About DMI

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost‑effective solutions that drive measurable results.

DMI is seeking a Microsoft Systems SME to serve as the subject matter expert for Windows endpoint engineering at a federal agency client. In this role, you will lead the design, configuration, and lifecycle management of Windows workstations and Microsoft endpoint management services, ensuring secure, compliant, and well‑documented deployments across the enterprise environment.

• Engineer and maintain secure Windows workstation images incorporating approved security baselines, authentication agents, and VDI/remote access capabilities
• Configure and maintain Microsoft Intune device compliance policies, configuration profiles, and conditional access requirements based on user role and device posture
• Manage Windows Autopilot for automated device provisioning, registration, and lifecycle management
• Implement and maintain OS and application patch management using Ivanti, KACE, and Intune/GPO-based orchestration; validate patches post‑deployment and support rollback
• Implement passwordless authentication and hardware‑backed credentials, including Yubi Key, CAC, and software keys for privileged and sensitive accounts
• Maintain Windows device enrollment workflows and accurate asset inventory, including provisioning, reassignment, decommissioning, and secure wipe
• Produce and maintain engineering documentation, runbooks, and change records for all Windows endpoint configurations

• Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred
• Education requirements may be waived based on professional experience, at the government’s discretion
• 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity
• 6+ years performing engineering (not help desk) functions in enterprise environments
• Expert‑level proficiency with Microsoft Intune, including compliance policies, configuration profiles, and conditional access
• Hands‑on experience with Windows Autopilot for device provisioning and lifecycle management
• Experience with Ivanti and/or KACE for OS and application patch management
• Experience with Group Policy Objects (GPO) for Windows endpoint configuration and security enforcement
• Experience implementing passwordless authentication and hardware‑backed credentials (Yubi Key, CAC, software keys)
• Experience working under formal change control, audit, and security governance processes

• Microsoft certifications in endpoint management or cloud administration (e.g., MD‑102, MS‑102)
• Experience with Microsoft Sentinel or equivalent SIEM for Windows endpoint telemetry
• Familiarity with hybrid identity environments integrating on‑premises Active Directory with Entra

Clearance Requirements
:
Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance. Active Top Secret (TS) clearance required.

Citizenship Status Required
:
Must be a U.S. Citizen

Physical Requirements
:
None required for this position.

Location
:
Remote, US

DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:

• Do What’s Right – We lead with honesty and integrity.
• Own the Outcome – We take responsibility and deliver.
• Deliver for Our Customers – We are relentless about delivering value.
• Think Bold, Act Smart – We innovate with purpose.
• Win Together – We collaborate and celebrate our success.

These values aren’t just ideals—they show up in how we support every part of your well‑being:

• Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life…