Endpoint Systems Administrator
Role details
Job location
Tech stack
Job description
- Develop, maintain, and optimize standard operating system images for all enterprise endpoint devices.
- Own the full lifecycle of desktop OS platforms, including design, configuration, testing, release, documentation, and continuous improvement.
- Manage deployment, maintenance, and version control for major enterprise applications and core endpoint software suites.
- Lead the patch management process for operating systems, security updates, and application patches; ensure timely, compliant, and well-communicated release cycles.
- Evaluate and integrate new tools, technologies, and methods to improve endpoint stability, security, and performance.
- Collaborate with cybersecurity teams to ensure compliance with security policies, vulnerability remediation, and hardening standards.
- Create and maintain technical documentation, configuration baselines, and operational procedures.
- Provide Tier 3 support for escalated endpoint issues requiring deep technical expertise.
- Monitor system performance, reliability, and patch compliance using enterprise management tools.
- Participate in strategic planning for endpoint technology architecture and long-term modernization efforts.
Requirements
5+ years of progressively responsible endpoint administration experience.
Demonstrated proficiency and expertise in the following:
- Deploying, configuring, and managing Windows or ThinLinux end-client operating system solutions.
- Installing, configuring, monitoring, and troubleshooting Microsoft and third-party enterprise applications across large endpoint environments.
- Performing comprehensive operating system and application patching via MECM/SCCM, including researching updates, testing in controlled environments, deploying to production, troubleshooting failures, and executing rollback procedures when required.
- Applying, validating, and maintaining security configurations based on Security Requirements Guides (SRGs) and Security Technical Implementation Guides (STIGs) for all supported endpoint platforms.
- Managing endpoint configuration, compliance, and automation through enterprise tools such as MECM/SCCM, Intune, or similar technologies.
- Diagnosing and resolving escalated endpoint issues requiring advanced technical knowledge of OS internals, application behavior, and configuration dependencies.
- Performing post-deployment remediation and cleanup patching using PowerShell or similar scripting tools to automate updates, enforce configuration baselines, and resolve inconsistent patch states.
TS/SCI clearance required with ability to obtain CI Poly
Must meet DoD 8140/CSWF for 451-Intermedediate or be willing to obtain the appropriate credential within 6 months
Preferred Requirements
Formal training or vendor certifications related to operating system administration or MECM/SCCM. Experience automating endpoint management tasks using PowerShell or similar scripting tools. Familiarity with modern endpoint management solutions such as Intune or Autopilot.
Benefits & conditions
The selected candidate will contribute to a high-impact government program focused on enhancing and securing mission-critical systems and environments. Due to the classified nature of the mission and the sensitivity of the operational environment, an active TS/SCI security clearance will be required. Candidate must be willing to obtain and maintain a CI poly.
Endpoint Systems Administrator I: $65,000 - $85,000
Endpoint Systems Administrator II: $80,000 - $105,000
Endpoint Systems Administrator III: $100,000 - $125,000, HII is more than a job - it's an opportunity to build a new future. We offer competitive benefits such as best-in-class medical, dental and vision plan choices; wellness resources; employee assistance programs; Savings Plan Options (401(k)); financial planning tools, life insurance; employee discounts; paid holidays and paid time off; tuition reimbursement; as well as early childhood and post-secondary education scholarships. Bonus/other non-recurrent compensation is occasionally offered for qualified positions, and if applicable to this role will be addressed by the recruiter at the screening phase of application.