MSM Technology, LLC

Job DescriptionJob DescriptionDescription: MSM Technology is seeking a Senior Endpoint Engineer to support the Department of Homeland Security in a fully cloud-based Microsoft Azure environment. The selected candidate will join a team of Windows cloud engineers and cybersecurity specialists responsible for modern endpoint management, automation, and security hardening across enterprise systems. This role focuses heavily on Microsoft Intune administration, Windows Autopilot deployment, endpoint compliance, enterprise patching, and automation through PowerShell scripting. The engineer will work across endpoint management and server operations teams to support secure device provisioning, application deployment, patch management, and vulnerability remediation. The ideal candidate will have strong experience in software packaging and deployment, endpoint compliance, security baseline implementation, and troubleshooting enterprise Windows environments. This individual will also play a key role in mentoring junior engineers and collaborating with security teams to ensure systems align with DHS security requirements. Administer and engineer Microsoft Intune environments including device compliance policies, conditional access, application deployment, and patch management. Create, configure, and deploy Intune policies, device configurations, and endpoint security settings Manage and maintain Windows 11 workstation baseline configurations Support provisioning and troubleshooting of devices using Windows Autopilot and Autopilot pre-provisioning Utilize Windows Update for Business (WUfB) to maintain enterprise patch compliance Package, test, and deploy enterprise applications using PSAppDeployToolkit (PSADT) or similar tools Develop and implement endpoint security baselines in collaboration with engineering and cybersecurity teams Support endpoint hardening using Windows Defender Application Control (WDAC) Monitor and maintain endpoint compliance, vulnerability remediation, and patch management Create reporting on device compliance, patch status, software inventory, and deployment metrics Develop PowerShell scripts and automation workflows to streamline endpoint management tasks Troubleshoot complex endpoint and system issues, providing both short-term mitigation and long-term remediation Support Tier 2 escalation requests and collaborate with Tier 3 engineering teams to resolve incidents Provide guidance and mentorship to junior systems and endpoint engineers Participate in client meetings to ensure technical requirements and operational needs are met Collaborate with security, infrastructure, and cloud engineering teams to implement new technologies and improvements Participate in special engineering initiatives, technology testing, and cloud modernization projects Requirements: Education / Experience: Bachelor's degree + 10 years relevant experience, OR Associate degree + 12 years relevant experience, OR 16 years of relevant experience Tools and Technologies: Experience managing cloud-based endpoint environments Experience supporting Azure Virtual Desktop (AVD) environments Experience with Nerdio or similar AVD management platforms Familiarity with PSAppDeployToolkit (PSADT) Experience implementing Windows Defender Application Control (WDAC) Experience with endpoint vulnerability management Preferred Technical Skills: Strong experience with Microsoft Intune administration and engineering Experience supporting software packaging, patch management, and application deployment

Job DescriptionJob DescriptionDescription: Modernize agency's network infrastructure - design, solution and architecture. Assess and implement new or replace IT equipment in use throughout agency's enterprise network. This includes telecom closet switches, line cards, routers, firewalls, cabling, etc. (Lifting up to 50lbs, using ladders and standing for extended periods of time). Review agency's IT infrastructure on a regular basis to maximize system performance and efficiencies. Determine the production infrastructure capacity IT needs to meet the evolving demands of the agency. Support the expansion of agency's network for things such as support for increased remote and geographically dispersed workforce, support for additional network-intensive services such as softphones and further use of cloud-provided services, etc. Review agency and M365 AD and identify design inconsistencies - develop corrective action and cleanup plans for the agency's environment. Assist Tier II in resolving escalated incidents and requests using a combination of prior technical knowledge among team members via mentoring and cross-training. In addition, team members are expected to research and contribute to a shared knowledge base to help troubleshoot issues and share information to be used by others. Look for areas to create new and update existing policies and procedures to ensure consistent work quality. Ability to provide subject matter expertise and strategic vision to senior level leadership. Maintain excellent collaboration and working relationships with all tier teams to ensure all teams aware of current efforts Requirements: Master's degree in relevant field 14+ years of relevant experience Minimum 10 years of experience with these technologies: Cisco Switches Cisco VPN Cisco Nexus Palo Alto Firewalls Cisco Unity Call Manager Aruba Guest Wireless AP's (53) Citrix Netscaler Nutanix MS Express Route, DOI connection zScaler Zayo Allied and AT&T circuits