Endpoint Engineer SME

Service Desk Engineering SME

Position Summary 

KeenLogic is seeking a Service Desk Engineering SME to support the Congressional Budget Office (CBO) by engineering, securing, deploying, and maintaining enterprise endpoint management solutions across Windows and macOS environments. This position will provide advanced endpoint engineering expertise supporting workstation imaging, device enrollment, patch management, software deployment, endpoint security, automation, and operational support activities while ensuring compliance with CBO security and technology standards. 

Work is primarily performed remotely; however, contractor personnel must be available to provide onsite support at the CBO Ford House Office Building in Washington, DC, as directed by the Government. KeenLogic offers Fortune 500-level benefits, including health, dental, and vision insurance, PTO, 401(k), and life insurance. 

Required Qualifications 

• U.S. Citizen and active Top Secret clearance 

• Bachelor's degree in Information Technology, Computer Science, Cybersecurity, or related discipline (or equivalent experience)

• 8+ years of IT, Endpoint Engineering, Systems Administration, or related experience

• Experience supporting enterprise Windows and macOS environments

• Experience with:

• Microsoft Intune

• Windows Autopilot

• JAMF

• Ivanti

• KACE

• Active Directory

• Microsoft 365 administration

• Experience with endpoint security, patch management, and device lifecycle management

• Experience supporting virtual desktop and remote access technologies

• Experience developing technical documentation and operational procedures

• Experience supporting federal security and compliance requirements

Key Responsibilities 

Endpoint Engineering & Device Management 

• Engineer and maintain Windows and macOS workstation configurations

• Support device provisioning, enrollment, deployment, and lifecycle management

• Maintain endpoint standards, baselines, and configuration policies

• Support endpoint modernization initiatives

Endpoint Management Platforms 

• Administer and support Microsoft Intune environments

• Configure and maintain Windows Autopilot deployments

• Support JAMF administration for Apple devices

• Manage Ivanti and KACE endpoint management solutions

• Maintain software deployment and inventory management capabilities

Patch Management & Security 

• Develop and maintain endpoint patching processes

• Support vulnerability remediation efforts

• Implement endpoint hardening and security controls

• Maintain compliance with organizational security policies

• Support audit and compliance activities

Automation & Operational Support 

• Develop automation solutions to improve endpoint deployment and administration

• Troubleshoot endpoint, application, and device management issues

• Support service desk escalations and complex technical incidents

• Collaborate with infrastructure, cybersecurity, and engineering teams

Documentation & Knowledge Transfer 

• Maintain technical documentation, runbooks, and operational procedures

• Support knowledge transfer activities and user support initiatives

• Participate in technical reviews and continuous improvement efforts