Microsoft SME

Softtek Government Solutions is seeking highly cleared, experienced IT engineering professionals to support the Congressional Budget Office (CBO) Service Desk Engineering task order. This initiative focuses on fundamentally hardening the CBO’s enterprise environment to reduce the risk of unauthorized lateral movement, credential misuse, and persistence techniques.

Note: This is an advanced engineering scope focused on resolving complex escalations, implementing security architecture, and developing automated workflows. It does not involve routine Tier 1 end-user help desk support.

The engineering team will be responsible for designing, deploying, and maintaining the technical controls necessary to secure endpoint, identity, and device lifecycle operations.

Responsibilities

• Design and maintain standardized Windows workstation images for on-site and VDI/remote access.
• Leverage Microsoft Intune to enforce device compliance, configuration profiles, security policies, and conditional access requirements.
• Engineer and support Microsoft Intune registration and Windows Autopilot for desktops, laptops, and CBO-issued mobile devices, including passwordless authentication and hardware-backed credentials.
• Manage Windows patching orchestration via Intune/GPO in coordination with Ivanti, including post-deployment validation and rollback.
• Apply expert-level Group Policy (GPO) management to enforce baseline configurations across the Windows estate.
• Ensure proper configuration of Windows Event Logs and Windows Event Forwarding for forensic readiness and SIEM integration.
• Produce runbooks, remediation plans, and conduct knowledge transfer sessions with Service Desk and Incident Response teams.

Do you have experience in UEM?, Do you have a Bachelor’s degree?, * Bachelor’s degree in Information Technology, Cybersecurity, or a related field. Formal education requirements may be waived based on relevant professional experience, * Must be a US Citizen

• Minimum 8 years of experience in IT, Endpoint Engineering, or Cybersecurity, with at least 6 years in engineering (not help desk) roles in enterprise environments.
• Expert-level knowledge of Microsoft Intune, Windows Autopilot, and Group Policy (GPO) management.
• Experience building and automating Windows images integrated with VDI, EDR, authentication, and logging agents.
• Strong understanding of Windows Active Directory/Entra ID interactions, Windows Event Forwarding, and Windows security hardening baselines.
• Experience working under formal change control, audit, and security governance processes.

Required Clearance

• Active Top Secret (TS) security clearance.

Pulled from the full job description

• Tuition reimbursement
• Paid time off
• Gym membership
• Commuter assistance, Softtek Government Solutions encourages collaborative communication and ongoing learning. Some of our benefits include:
• Extensive training programs
• Gym membership reimbursement
• Education reimbursement
• Technology benefits
• Commuter benefits
• Generous paid time off and much more!

Softtek Government Solutions is a professional services firm focused on addressing our nation’s most complex threats and challenges. As a small business we’re committed to supporting our clients’ missions with services delivered by our diverse and experienced staff. With expertise in cybersecurity, emergency preparedness, and public health, our experience base spans federal, state, and local governments, as well as private sector entities.