Endpoint Security Engineer

Endpoint Security Engineer

Technology and Computer-related

Vienna, VA
• Full-Time/Regular

Focuses on securing all enterprise-managed endpoints through policy enforcement, compliance monitoring, device protection controls, and integration of UEM platforms with enterprise security systems.

Position requires on-site support.

Responsibilities may include, but are not limited to:

• Design and enforce compliance policies within Workspace One, Microsoft Intune, and/or Jamf.
• Oversee mobile security controls including device encryption, lost/stolen device workflows, and remote wipe/lock actions.
• Conduct security reviews for OS updates, CVEs, and platform changes.
• Work with security teams to integrate conditional access, certificate policies, and identity-based access controls.
• Develop automated compliance reporting using Power Shell or other scripting tools.
• Respond to escalated security incidents involving managed endpoints.
• Maintain documentation of security posture, SOPs, and enforcement standards.

· BS in IT or related field (preferred). Formal technical training, certifications, and/or additional experience may be substituted for the degree preference.

· Minimum of 2–4 years of experience in UEM administration with security responsibilities.

· Experience troubleshooting device compliance issues, policy conflicts, and non-compliance scenarios.

· Experience collaborating with enterprise security and engineering teams.

· Strong understanding of MDM/MAM security frameworks.

· Hands-on experience configuring compliance, encryption, device restrictions, and mobile security controls.

· Proficiency with Power Shell scripting for reporting and automation.

· Familiarity with identity systems, conditional access, and platform SSO.

· ITSM platform experience (BMC or Service Now).

Qualifications:

· Must obtain an agency public trust suitability determination prior to start date

· Must have strong analytical skills.

· Must be able to work with sensitive data in a controlled environment.

· Ability to support after-hours response for critical security issues.

· Ability to communicate effectively and efficiently with all levels of leadership.

· Must have excellent verbal and written communication and stakeholder-facing skills.

· Must be able to work independently and within a multi-disciplinary team to meet demanding deadlines in a fast-paced technology environment.

· Must maintain a high level of customer service for all support interactions.

· Experience with mobile threat defense platforms (MTD) is a plus.

· Experience supporting a complex Federal agency enterprise is a plus.

· Relevant security related certification(s) such as Security+, CASP+, Microsoft SC series, and/or Jamf 300+ are preferred.