End-User Computing; EUC) Engineer Job Washington area,District of Columbia USA,IT/Tech

Key Responsibilities:

Endpoint Platform Engineering:

Lead engineering design, build, and optimization of SBA's enterprise endpoint computing platforms, including Windows 10/11 workstations, laptops, and mobile devices
Develop and maintain endpoint configuration baselines, hardening standards, and compliance frameworks aligned with NIST SP 800-53, CIS benchmarks, and SBA cybersecurity requirements
Engineer and maintain Microsoft Intune policies, configuration profiles, compliance baselines, and application deployment packages for SBA's endpoint fleet
Design and implement Windows Autopilot deployment workflows for zero-touch device provisioning and refresh
Lead endpoint platform testing, validation, and quality assurance for configuration changes and new deployments
Evaluate emerging endpoint technologies and recommend solutions aligned with SBA's enterprise environment and security requirements
Support development and maintenance of the endpoint engineering roadmap in coordination with the End-User Services Lead and Microsoft Infrastructure team

Device Management & Automation:

Engineer and maintain automated device management workflows using Microsoft Intune, Power Shell, and related tooling
Develop and maintain software packaging, deployment automation, and application lifecycle management processes
Design and implement automated patch management and software update workflows for Windows endpoints
Build and maintain automation scripts and tools that reduce manual effort and improve consistency across end-user computing operations
Engineer self-healing and remediation automation workflows that proactively address common endpoint issues without requiring manual intervention
Support development and maintenance of endpoint monitoring and alerting configurations in coordination with the NOC and Infrastructure teams

Configuration Management & Compliance:

Develop and maintain endpoint configuration management documentation, baselines, and change records
Engineer and maintain Group Policy Objects (GPOs) and Intune configuration profiles that enforce SBA security and compliance standards
Support endpoint compliance monitoring and reporting, providing actionable data to the End-User Services Lead and Service Management team
Lead remediation of endpoint compliance findings identified through security assessments, audits, and continuous monitoring
Coordinate with the Microsoft Infrastructure Administrator (Senior) on endpoint security policy alignment and enforcement
Maintain accurate and current endpoint configuration documentation in the Government ITSM platform and knowledge base

End-User Computing

Infrastructure:

Engineer and maintain Virtual Desktop Infrastructure (VDI) or Windows Virtual Desktop (Azure Virtual Desktop) environments as applicable to SBA's environment
Support engineering and administration of enterprise software distribution platforms and application virtualization solutions
Maintain and optimize endpoint imaging and deployment infrastructure, including task sequences, driver libraries, and OS deployment workflows
Engineer and maintain mobile device management (MDM) configurations for SBA-issued smartphones and tablets
Support integration of end-user computing platforms with Microsoft Entra identity, conditional access, and Zero Trust Architecture frameworks
Coordinate with the Network Engineer T4 team on network requirements for endpoint management infrastructure

Security Engineering & Zero Trust:

Engineer endpoint security configurations aligned with Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09)
Design and implement Microsoft Defender for Endpoint configurations, policies, and automated response workflows
Support implementation of application control, device guard, and credential guard technologies across SBA's endpoint fleet
Engineer and maintain endpoint data loss prevention (DLP) configurations in coordination with the Microsoft Infrastructure team and Purview compliance solutions
Conduct endpoint security engineering reviews and provide recommendations for improving SBA's endpoint security posture
Support incident response activities involving endpoint security events in coordination with the NOC and Microsoft Infrastructure teams

Knowledge Management & Documentation:

Maintain comprehensive and current documentation of all endpoint platform configurations, engineering decisions, and operational procedures
Develop and maintain technical runbooks, engineering standards, and knowledge base articles for EUC engineering…