Senior Endpoint Migration Engineer

Job Description

Job Description

Senior Endpoint Migration Engineer

Unleash your potential at GES, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. We're eager to connect with you regarding transitioning to GES!

The GES Digital Modernization Sector has a career opportunity for a Project Manager to join our dynamic DES (Defense Enclave Services) team supporting DISA at Fort Meade, MD on a hybrid basis.

PROGRAM SUMMARY:

The Defense Enclave Services contract will unify the DoD Fourth Estate Defense Agencies and Field Activities’ (DAFAs) common use information technology systems, personnel, functions, and program elements under the direction of DISA’s Fourth Estate Network Optimization program office. It will unify the DAFAs on a common, modernized network architecture, DoDNet, to provide mission services focused on enhanced user experience, improved security, and network reliability.

CLEARANCE REQUIREMENT: Must have an ACTIVE SECRET or above clearance required. (US Citizenship required)

Job Summary

As an Endpoint Engineer you will focus on endpoint designs, deploys, and secure end-user devices (workstations, laptops) using tools like Intune, MCM, SCCM. Ensure proper OS images are deployed to all endpoint devises, test and manage software updates, ensure appropriate and enforce security policies (EDR/AV), and automate workflows to ensure stable, compliant, and efficient computing environments for endpoint migrations.

Key Responsibilities

• Endpoint Management & Provisioning: Managing the lifecycle of devices—including imaging, configuration, and decommissioning—using tools like Intune, SCCM/MECM, or Jamf.
• Security & Patch Management: Designing and enforcing endpoint security baselines, ensuringtimelyOS and application patching, and managing EDR/AV software.
• Automation & Scripting: Using PowerShell, Python, or bash to automate software deployment, configuration changes, and compliance remediation.
• Application Packaging: Oversee application rationale and ensure proper preparation for deploying software applications at scale to Windows environments.
• Troubleshooting & Support: Acting as an escalation point for complex technical issues relating to endpoints that cannot be resolved by standard IT support.
• Compliance & Reporting: Monitoring device health and security compliance,maintainingdocumentation, and ensuring adherence to security policies (e.g., NIST, DISA STIGs).

Required Qualifications

• Experience: BA Degree and 4+ years of experience. Additional experience may be accepted in lieu of degree.
• Tools: Deep knowledge of Microsoft Intune, MECM (SCCM), Active Directory, and Group Policy.
• 8140 Certification required
• Security Knowledge: Familiarity with endpoint security tools