Endpoint Engineer (Unified Endpoint Management)

Engineers and sustains endpoint management capabilities supporting DHA operations, including device configuration, compliance enforcement, and secure monitoring. This role focuses on building reliable endpoint services that scale and reduce manual technician workload.

Key Tasks & Responsibilities :
• Provide engineering, architectural, Tier 3/4 expertise to deliver forward-looking, compliant endpoint solutions for the MHS (Military Health System) hybrid environment supporting application integration, application security, desktop engineering, service monitoring, and endpoint management.
• Develop and engineer a standardized framework for centrally deploying, managing, and monitoring endpoints, applications, systems, and services across on-premises, cloud, and SaaS environments.
• Engineer, architect, design, configure, and maintain Enterprise Management solutions and endpoint management tools, infrastructure, agents to deliver and sustain endpoints, applications, services, hotfixes, patches, and tools across the enterprise.
• Engineer application integration packages supporting baseline operating systems for physical and virtual endpoints, including standardized administration, security, monitoring suites, and baseline endpoint applications.
• Design, build, test, and maintain endpoint configuration items, including task sequences, images, applications, group policy objects, in-place operating system upgrades in support of DHA endpoint standards.
• Maintain desktop and operating system image libraries consisting of approved baseline images and software used throughout the MHS environment.
• Validate compliance of endpoints, applications, and operating systems with IA controls, cybersecurity best practices, DISA STIGs, RMF (Risk Management Framework), Zero Trust strategy, and defense-in-depth requirements.
• Engineer and validate endpoint security tools and monitoring solutions used to assess, verify, and maintain IA compliance across managed systems and record RMF artifacts, POA&Ms (Plans of Action and Milestones), and continuous monitoring evidence within eMASS (Enterprise Mission Assurance Support Services).
• Engineer, design, and support mobile device solutions to standardize device provisioning, configuration, application delivery, security, authentication, end-user experience using on-premises, cloud, and SaaS management platforms.
• Engineer, design, consult, build, script, and deliver application packages using enterprise endpoint management tools, ensuring testing, baseline compliance, STIG integration, and IAVM compliance across endpoints.

Education & Experience :
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Data Science, Engineering, Mathematics, or a closely related discipline or equivalent practical experience (as permitted by the contract).
• Minimum 4 years of relevant experience supporting enterprise IT environments, with demonstrated work aligned to Endpoint Engineering Services.

Certifications:
• At least one: Cloud+, GICSP, SSCP, Security+, or GSEC.
• Alternate/equivalent certifications may be accepted with Government approval.
• Preferred/Work-center dependent: Microsoft Certified: Azure Administrator Associate or Microsoft Certified: Windows Server Hybrid Administrator Associate.

Security Clearance :
• Must be able to obtain and maintain Public Trust suitability and all required system access (e.g., CAC-enabled accounts) to perform duties.

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.) :
• Work is primarily on-site in San Antonio, TX; limited remote work may be allowed when authorized by the Government and mission requirements permit. Work may require after-hours, weekend, and/or on-call support as directed, including support during scheduled maintenance windows, high-impact incidents, vulnerability response actions, inspections, and surge periods. This position is aligned to applicable DoD Manual 8140.03 work role 451 (NIST: OM-SA-001); contractor personnel must meet DoD 8570.01-M baseline certification requirements and transition to DoD Manual 8140.03 work role requirements, including required training, knowledge, skills, abilities, and tasks, within Government-directed timelines.

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.
Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected].