Endpoint Engineer (Senior)

About this role

Overview
DecisionPoint seeks an Endpoint Engineer to design, maintain, secure, automate, and modernize enterprise endpoint capabilities supporting the USMEPCOM ENLIST program. This senior engineering position owns endpoint images, application packaging, device provisioning, software deployment, endpoint patching, configuration baselines, and Virtual Desktop Infrastructure engineering.
The Endpoint Engineer develops standardized, repeatable, and secure endpoint solutions for geographically dispersed users and locations. The engineer supports physical and virtual endpoints throughout their lifecycle, including design, testing, deployment, configuration, patching, troubleshooting, refresh, recovery, and retirement.
This position works closely with the Task 6 cybersecurity team while maintaining a clear division of responsibility. Task 6 identifies, prioritizes, and validates security findings. The Endpoint Engineer evaluates operational impacts and implements the approved endpoint configuration, software, image, patch, or remediation changes through established change-control procedures. The engineer then provides deployment and completion evidence for cybersecurity validation.
The Endpoint Engineer collaborates with the Service Desk, field support, Active Directory, virtualization, cloud, network, application, cybersecurity, and Government teams. This position is remote, with Chicago-area candidates preferred. Occasional after-hours maintenance, critical incident support, on-site work, or travel may be required.
Note: By applying to this position, you acknowledge and consent to having your resume included in an active competitive government contract bid.
Duties & Responsibilities
The Endpoint Engineer will:

• Serve as the senior engineer for enterprise endpoint imaging, packaging, deployment, patching, configuration, and VDI capabilities.

• Design, build, test, maintain, and document standardized endpoint images.

• Maintain image components, drivers, firmware dependencies, operating-system settings, security baselines, required software, and deployment configurations.

• Establish image versioning, testing, approval, rollback, release, and retirement procedures.

• Validate endpoint images against functional, security, performance, compatibility, and operational requirements.

• Develop and maintain automated deployment task sequences, provisioning workflows, configuration profiles, and enrollment processes.

• Engineer and support endpoint deployment using approved Microsoft and Government management platforms.

• Support modern endpoint-management and co-management capabilities involving Microsoft Intune, Microsoft Configuration Manager, Windows Autopilot, or comparable technologies.

• Develop, test, maintain, and deploy application packages using approved formats and packaging standards.

• Package commercial, Government, and internally developed software for controlled endpoint deployment.

• Develop installation, detection, dependency, requirement, upgrade, repair, and removal logic for software packages.

• Test application packages for silent installation, proper detection, compatibility, security, user experience, and clean removal.

• Troubleshoot failed installations, package conflicts, missing dependencies, detection problems, and deployment errors.

• Develop approved scripts and automation for packaging, provisioning, configuration, deployment, validation, and remediation.

• Maintain endpoint-management automation in approved version-control and documentation repositories.

• Design and administer endpoint patching processes for operating systems, approved applications, drivers, firmware, and management components.

• Establish deployment rings, pilot groups, production waves, maintenance windows, deadlines, exception handling, and rollback procedures.

• Test operating-system updates, security patches, vendor patches, and application updates before production deployment.

• Monitor deployment progress, failure rates, compliance status, endpoint health, and outstanding exceptions.

• Investigate failed patches and coordinate corrective actions, redeployment, or approved exceptions.

• Engineer and support Virtual Desktop Infrastructure capabilities.

• Develop and maintain VDI base images, desktop pools, application delivery, user-profile configurations, policies, and endpoint-access requirements.

• Monitor and troubleshoot VDI performance, availability, login, profile, application, display, peripheral, and connectivity issues.

• Support VDI modernization, capacity planning, testing, deployment, and optimization.

• Coordinate VDI platform dependencies with virtualization, storage, network, identity, application, and cybersecurity teams.

• Support enterprise endpoint deployment and refresh projects across USMEPCOM Headquarters, MEPS, Remote Processing Substations, COOP sites, and remote users.

• Develop technical implementation plans for device refreshes, operating-system upgrades, application migrations, and endpoint-management transitions.

• Support endpoint provisioning, enrollment, configuration, testing, deployment, replacement, recovery, and retirement.

• Provide Tier 3 and Tier 4 engineering support for complex endpoint, application-packaging, deployment, patching, and VDI incidents.

• Analyze endpoint logs, deployment status, policy results, management-platform data, and other technical evidence.

• Develop corrective actions for recurring endpoint incidents and known errors.

• Support major incidents and outages involving endpoint management, software deployments, VDI, or widespread device failures.

• Implement approved workarounds and service-restoration actions during endpoint-related incidents.

• Coordinate with the Service Desk and field-support teams to improve endpoint troubleshooting, escalation, and knowledge content.

• Create technical guidance for common endpoint, deployment, packaging, and VDI problems.

• Review Task 6 cybersecurity…