Endpoint Lead Engineer

AAC Inc
Vienna, United States of America
1 month ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English
Experience level
Senior

Job location

Vienna, United States of America

Tech stack

Microsoft Windows
Android
iOS
Apple Mac Systems
Python
Powershell
Workspace ONE
Microsoft InTune
Casper Suite

Job description

Serves as the enterprise-level designer and technical authority for all UEM platforms across the environment. This role architects end-to-end management strategies for Windows, macOS, iOS, and Android devices, ensuring secure, scalable, and automated endpoint management.

Position requires on-site support.

Responsibilities may include, but are not limited to:

  • Serve as lead architect for Workspace One, Microsoft Intune/Jamf enterprise deployments.

  • Design configuration baselines, compliance frameworks, conditional access integration, and advanced automation pipelines.

  • Define and maintain zero-touch deployment strategy across device types.

  • Oversee high-level scripting architecture using PowerShell, Python, and platform-specific tooling.

  • Lead major modernization efforts, including transitions to Declarative Device Management, Platform SSO, and ABM-driven provisioning.

  • Provide guidance to engineering teams and mentor senior and mid-level administrators.

  • Review and approve UEM security controls, reporting structures, and integration with enterprise systems.

Requirements

Do you have experience in UEM?, Do you have a Bachelor's degree?, * BS in IT or related field (preferred). Formal technical training, certifications, and/or additional experience may be substituted for the degree preference.

  • 5-7 years direct UEM engineering experience.

  • 3+ years architectural-level design or enterprise engineering leadership experience.

  • Extensive experience implementing Apple Business Manager and Declarative Device Management.

  • Expert-level knowledge of WorkSpace One, Microsoft Intune, and/or Jamf (deployment, configuration, lifecycle, compliance).

  • Deep understanding of UEM security models, certificate-based authentication, conditional access, and mobile threat protection.

  • Advanced scripting capability (PowerShell required; Python strongly preferred).

  • Ability to design scalable, automated architectures supporting thousands of endpoints.

  • Strong interpersonal and leadership skills.

Qualifications:

  • Must obtain an agency public trust suitability determination prior to start date.

  • Ability to work closely with executive leadership on sensitive, mission-critical decisions.

  • Strong documentation and standards development capability.

  • Must have excellent verbal and written communication and stakeholder-facing skills.

  • Ability to communicate effectively and efficiently with all levels of leadership.

  • Must be able to work independently and within a multi-disciplinary team to meet demanding deadlines in a fast-paced technology environment.

  • Must maintain a high level of customer service for all support interactions.

  • Experience supporting a complex Federal agency enterprise is a plus.

  • Relevant expert-level Microsoft certifications are preferred.

Apply for this position