> Markdown version of [/jobs/ext/1741346-endpoint-engineer-3629911](https://www.wearedevelopers.com/jobs/ext/1741346-endpoint-engineer-3629911). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Endpoint Engineer- 3629911 - **Company:** Computer Technologies Consultants, Inc. (CTC) - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $145,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Apple Mac Systems, User Authentication, Configuration Management, Cyber Security, Event Logging, Security Information and Event Management, Software Vulnerability Management, Data Logging, Microsoft InTune, Information Technology, Deployment Automation, Microsoft Sentinel, Casper Suite, Software Version Control - **Published:** July 7, 2026 - **Apply:** https://www.clearancejobs.com/jobs/9015129/endpoint-engineer-3629911 ## About the Role Required Years of Experience (min) : * Eight (8) years of experience in Information Technology, Endpoint Engineering, or Cybersecurity. * Six (6) years of experience performing engineering (not help desk) functions in enterprise environments. Required Degree/Certifications : * Bachelor's degree in Information Technology, Cybersecurity, or a related field (or equivalent experience). Formal education requirements may be waived based on relevant professional experience. Required Experience & Expertise in the following areas : * Experience working under formal change control, audit, and security governance processes. Endpoint Imaging and Automation Engineering * Experience building and maintaining Windows and macOS workstation images. * Experience with image automation, validation, rollback, and version control. * Experience integrating images with VDI, EDR, authentication, and logging agents. Patch and Configuration Management Engineering * Hands-on experience using Ivanti and/or KACE for operating system and application patching. * Experience managing configuration drift, remediation workflows, and reporting. * Experience validating patches post-deployment and supporting rollback. Device Enrollment and Identity Engineering * Experience with Microsoft Intune/Windows Autopilot for provisioning/compliance enforcement. * Experience using JAMF Pro for macOS endpoint management. * Experience implementing passwordless authentication and hardware-backed credentials, including YubiKey, CAC, or software keys. Logging, Monitoring, and Telemetry Engineering * Experience configuring endpoint logging, including Windows Event Logs and macOS Unified Logs. * Experience forwarding and validating logs into SIEM/EDR platforms such as Microsoft Sentinel, not limited to Microsoft Sentinel. * Experience supporting forensic collection and audit readiness. Required Clearance : * Top Secret (TS) Security Clearance required. ## Description Daily Responsibilities: * Design, implement, and tune engineering controls to detect and limit initial compromise and lateral movement. Integrate these activities into workstation imaging, device registration, and user registration processes to support secure baseline enforcement and accurate asset inventory management. * Design, implement, and maintain standardized endpoint configurations to support the security, compliance, and integrity of user devices and associated assets throughout their lifecycle using approved endpoint management and deployment tools, including Ivanti, KACE, Microsoft Intune, and Windows Autopilot, as applicable. * Own engineering design, validation, and lifecycle maintenance of imaging and patching processes to support consistent, secure workstation builds and timely vulnerability remediation. Assess and harden machine identity artifacts, engineer detection for persistence mechanisms, and develop remediation and recovery runbooks. * Ensure secure, consistent device enrollment and accurate asset tracking across the environment. Support device provisioning, reassignment, decommissioning, secure wipe, recovery key escrow, and lifecycle visibility. * Ensure endpoints produce telemetry required for detection, troubleshooting, and forensics, and that telemetry flows to central systems in a reliable and auditable manner. * Follow the assessment-to-remediation workflow by performing technical assessments, producing Findings Reports, submitting Remediation Plans, obtaining required approvals, executing approved remediation during change windows, performing post-change validation, and publishing Validation Reports. * Produce engineering documentation, operational playbooks, user-facing runbooks, knowledge-transfer materials, and versioned knowledge-base content to make solutions operationally sustainable by the Service Desk and IRM teams. ## Related Videos - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Is your backend a hodgepodge of queues, event stores and cron jobs? Durable Execution to the Rescue.](https://www.wearedevelopers.com/videos/744-is-your-backend-a-hodgepodge-of-queues-event-stores-and-cron-jobs-durable-execution-to-the-rescue) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Logs in observability - Correlation](https://www.wearedevelopers.com/videos/1430-logs-in-observability-correlation) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Kafka Streams Microservices](https://www.wearedevelopers.com/videos/168-kafka-streams-microservices) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)