Endpoint Service Desk Engineering Lead

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Endpoint Service Desk Engineering Lead based in United States.

This senior technical role focuses on enterprise endpoint engineering, automation, and secure device management across Windows and macOS environments.
You will lead the engineering of endpoint services supporting imaging, provisioning, patching, configuration, and remediation at scale.
The position plays a key role in maintaining secure baselines and meeting compliance requirements across enterprise environments.
You will work with modern endpoint management platforms to automate deployments and improve operational consistency.
The role also involves resolving complex engineering issues and strengthening lifecycle management processes.
Collaboration with cybersecurity, DevSecOps, and program management teams will be essential to delivering reliable and secure IT services.
This is an opportunity to take ownership of mission-critical endpoint engineering in a security-focused environment.

Accountabilities

• Lead enterprise endpoint engineering initiatives across Windows and macOS device environments, ensuring reliable and secure endpoint operations.
• Own the full device lifecycle, including imaging, provisioning, patching, configuration management, remediation, and lifecycle updates.
• Implement, maintain, and optimize endpoint management technologies such as Microsoft Intune, Autopilot, JAMF, Ivanti, and KACE.
• Develop and execute automated deployment and configuration controls to improve scalability, consistency, and operational efficiency.
• Establish and maintain patch validation, testing, and rollback procedures to reduce operational risk and service disruption.
• Support secure baseline enforcement, endpoint compliance monitoring, and remediation activities across enterprise environments.
• Create and maintain engineering documentation, including runbooks, standard operating procedures, and remediation workflows.
• Provide escalation support and resolve complex endpoint engineering and operational issues.
• Collaborate closely with DevSecOps, cybersecurity, and program management teams to align endpoint services with security and mission requirements.

Requirements

• Minimum 8 years of experience in IT, endpoint management, cybersecurity, or a closely related technical discipline.
• At least 6 years of hands-on experience performing engineering functions within enterprise IT or endpoint environments.
• Demonstrated expertise leading endpoint engineering, automation, enterprise device management, imaging, patching, configuration control, and remediation across Windows and macOS.
• Practical experience with endpoint management platforms such as Intune, Autopilot, JAMF, Ivanti, and/or KACE.
• Strong understanding of endpoint security, configuration management, patch management, compliance controls, and device lifecycle processes.
• Ability to develop automation, deployment controls, validation procedures, and repeatable remediation workflows.
• Strong troubleshooting, analytical, documentation, and problem-solving skills, with the ability to resolve complex engineering issues.
• Effective communication and collaboration skills, particularly when working with cybersecurity, DevSecOps, and program management stakeholders.
• A degree is not required; demonstrated technical expertise and relevant engineering experience are the primary qualifications.
• Must be a U.S. citizen and able to obtain and maintain the required security clearance and complete applicable background investigations and security training.
• An active Top Secret (TS) security clearance is required.
• Ability to work remotely within the metropolitan Washington, DC area and occasionally work onsite or attend team meetings as required.

Benefits

• Annual salary of $155,000–$195,000 .
• Medical, dental, and vision insurance.
• Flexible Spending Account (FSA).
• Health Savings Account (HSA).
• Life and Accidental Death & Dismemberment (AD&D) insurance.
• Short-term and long-term disability coverage.
• 401(k) retirement plan.
• Tuition assistance.
• Paid time off.
• Remote work arrangement within the Washington, DC metropolitan area, with occasional onsite requirements.
• Equal opportunity and reasonable accommodation support throughout the employment process.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.