Systems Administration Endpoint Engineering

Systems Administration Endpoint Engineering

Onsite;
San Antonio, TX

• Provide engineering, architectural, and Tier 3/4 expertise to deliver forward‑looking, compliant solutions for the MHS hybrid environment in support of standard Application Integration, Application Security, Desktop Engineering, and Service Monitoring functions that enable management to the endpoint. Develop and engineer a standard framework for centrally deploying and supporting applications and systems within the DHA hybrid production environment and provide a common system and monitoring framework and capability used by other teams to maintain applications, services, and systems.
• Application Integration – Engineer packages and test software that supports the baseline OS for virtual and physical endpoints throughout the DHA environment, including standardized administration, security, and monitoring suite. Application packaging, deployment support and configurations of baseline endpoint applications. Architect, design, and support centrally managed endpoint architecture adherent to DoD/DHA policies, tools and procedures used to maintain the DHA environment. Engineer, architect, design, configure and maintain Enterprise Management solutions and appropriate engineering and architecture packages and drawings as needed by the environment.
  
  Engineer, architect, design, support and troubleshoot endpoint management tools, infrastructure, and agents on‑premise, in the cloud and SaaS as appropriate to deliver and maintain endpoints, applications, services, hotfixes, patches and tools in support of the enterprise medical mission. Develop, maintain, and adjust methodologies, standards, and packages in support of forward‑looking objectives to transition from on‑premise, cloud, and SaaS use cases as appropriate.
  
  Develop new processes for upgrading, transitioning, and/or migrating MECM enterprise packages for use in Intune. Design, recommend, and develop new reporting processes in support of MHS/DHA mission.
• Endpoint and Identity Security – Validate compliance with IA controls and cybersecurity best practices for baseline applications, products, solutions, endpoints, and operating systems informed by DoDI 8510.01, RMF for DoD Information Systems. Perform security risk analyses and assessments of systems and applications throughout the application and system engineering life cycle with appropriate tools, guidelines, and policy, such as identifying security vulnerabilities and mitigation techniques using risk management framework process, IA controls, National Institute of Standards and Technology (NIST) standards, policies, procedures, configurations, Zero Trust strategy, Defense‑in‑depth, and patching.
  
  Engineer tools and solutions used to verify and validate IA compliance of the security posture of all systems managed by applicable teams. Ensure compliance with corresponding DISA STIGs. Deliver updates to security configurations of monitoring and compliance tools used in the labs in accordance with DoD cyber security regulations, guidelines, and industry best practices. Validate compliance with security controls used for new or existing applications and systems.
  
  Provide IA technical support and guidance as needed to ensure compliance with IA and NIST standards and other pertinent guidance from the concept stages through final solution delivery. Record all IA artifacts, POA&Ms, risk assessments, annual reviews, authorizations to operate, and continuous monitoring evidence within eMASS in support of RMF and Zero Trust strategy compliance.
• Desktop/Endpoint Engineering – Engineer, design, develop and architect the endpoint architecture in support of deployment and consumption throughout the MHS environment. Maintain desktop and Operating System image libraries for the MHS, consisting of all baseline desktop image builds and approved software used throughout the organization. Design, build, and test configuration items such as task sequences, group policy objects, images, applications, and in‑place upgrades.
  
  Engineer, architect, design, and develop solutions in support of DAR requirements, multi‑purpose kiosk requirements,…