End-User Computing (EUC) Engineer

Koniag IT Systems, LLC, a Koniag Government Services company, is seeking an End-User Computing (EUC) Engineer to support KITS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

The End-User Computing (EUC) Engineer provides advanced engineering support for SBA's enterprise end-user computing environment, focusing on the design, engineering, automation, and sustainment of endpoint platforms, device management infrastructure, and end-user computing technologies.

This role is distinguished from the Desktop / Field Support Technician by its focus on engineering, architecture, and platform-level work rather than individual incident resolution. The EUC Engineer designs and builds endpoint platforms, automation workflows, deployment pipelines, and configuration frameworks that enable the broader end-user services team to deliver consistent, high-quality support at scale.

This individual must be capable of operating autonomously on complex engineering tasks, demonstrating deep expertise in Microsoft endpoint management, device lifecycle engineering, and end-user computing automation in a Federal enterprise environment.

• Lead engineering design, build, and optimization of SBA's enterprise endpoint computing platforms, including Windows 10/11 workstations, laptops, and mobile devices
• Develop and maintain endpoint configuration baselines, hardening standards, and compliance frameworks aligned with NIST SP 800-53, CIS benchmarks, and SBA cybersecurity requirements
• Engineer and maintain Microsoft Intune policies, configuration profiles, compliance baselines, and application deployment packages for SBA's endpoint fleet
• Design and implement Windows Autopilot deployment workflows for zero-touch device provisioning and refresh
• Lead endpoint platform testing, validation, and quality assurance for configuration changes and new deployments
• Evaluate emerging endpoint technologies and recommend solutions aligned with SBA's enterprise environment and security requirements
• Support development and maintenance of the endpoint engineering roadmap in coordination with the End-User Services Lead and Microsoft Infrastructure team

• Engineer and maintain automated device management workflows using Microsoft Intune, Power Shell, and related tooling
• Develop and maintain software packaging, deployment automation, and application lifecycle management processes
• Design and implement automated patch management and software update workflows for Windows endpoints
• Build and maintain automation scripts and tools that reduce manual effort and improve consistency across end-user computing operations
• Engineer self-healing and remediation automation workflows that proactively address common endpoint issues without requiring manual intervention
• Support development and maintenance of endpoint monitoring and alerting configurations in coordination with the NOC and Infrastructure teams

• Develop and maintain endpoint configuration management documentation, baselines, and change records
• Engineer and maintain Group Policy Objects (GPOs) and Intune configuration profiles that enforce SBA security and compliance standards
• Support endpoint compliance monitoring and reporting, providing actionable data to the End-User Services Lead and Service Management team
• Lead remediation of endpoint compliance findings identified through security assessments, audits, and continuous monitoring
• Coordinate with the Microsoft Infrastructure Administrator (Senior) on endpoint security policy alignment and enforcement
• Maintain accurate and current endpoint configuration documentation in the Government ITSM platform and knowledge base

• Engineer and maintain Virtual Desktop Infrastructure (VDI) or Windows Virtual Desktop (Azure Virtual Desktop) environments as applicable to SBA's environment
• Support engineering and administration of enterprise software distribution platforms and application virtualization solutions
• Maintain and optimize endpoint imaging and deployment infrastructure, including task sequences, driver libraries, and OS deployment workflows
• Engineer and maintain mobile device management (MDM) configurations for SBA-issued smartphones and tablets
• Support integration of end-user computing platforms with Microsoft Entra identity, conditional access, and Zero Trust Architecture frameworks
• Coordinate with the Network Engineer T4 team on network requirements for endpoint management infrastructure

• Engineer endpoint security configurations aligned with Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09)
• Design and implement…