> Markdown version of [/jobs/ext/591767-microsoft-sme](https://www.wearedevelopers.com/jobs/ext/591767-microsoft-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Microsoft SME - **Company:** Aveshka, Inc. - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Systems Engineering, User Authentication, Cyber Security, Desktop Computing, Event Logging, Remote Access Technology, Security Information and Event Management, Data Logging, Microsoft InTune, Information Technology, Deployment Automation, Windows Security, Laptops - **Published:** June 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=466e2f04a83c8ab8 ## About the Role Do you have experience in UEM?, Do you have a Bachelor's degree?, * Bachelor's degree in Information Technology, Cybersecurity, or a related field. Formal education requirements may be waived based on relevant professional experience, * Must be a US Citizen * Minimum 8 years of experience in IT, Endpoint Engineering, or Cybersecurity, with at least 6 years in engineering (not help desk) roles in enterprise environments. * Expert-level knowledge of Microsoft Intune, Windows Autopilot, and Group Policy (GPO) management. * Experience building and automating Windows images integrated with VDI, EDR, authentication, and logging agents. * Strong understanding of Windows Active Directory/Entra ID interactions, Windows Event Forwarding, and Windows security hardening baselines. * Experience working under formal change control, audit, and security governance processes. Required Clearance * Active Top Secret (TS) security clearance. ## Description Softtek Government Solutions is seeking highly cleared, experienced IT engineering professionals to support the Congressional Budget Office (CBO) Service Desk Engineering task order. This initiative focuses on fundamentally hardening the CBO's enterprise environment to reduce the risk of unauthorized lateral movement, credential misuse, and persistence techniques. Note: This is an advanced engineering scope focused on resolving complex escalations, implementing security architecture, and developing automated workflows. It does not involve routine Tier 1 end-user help desk support. The engineering team will be responsible for designing, deploying, and maintaining the technical controls necessary to secure endpoint, identity, and device lifecycle operations. Responsibilities * Design and maintain standardized Windows workstation images for on-site and VDI/remote access. * Leverage Microsoft Intune to enforce device compliance, configuration profiles, security policies, and conditional access requirements. * Engineer and support Microsoft Intune registration and Windows Autopilot for desktops, laptops, and CBO-issued mobile devices, including passwordless authentication and hardware-backed credentials. * Manage Windows patching orchestration via Intune/GPO in coordination with Ivanti, including post-deployment validation and rollback. * Apply expert-level Group Policy (GPO) management to enforce baseline configurations across the Windows estate. * Ensure proper configuration of Windows Event Logs and Windows Event Forwarding for forensic readiness and SIEM integration. * Produce runbooks, remediation plans, and conduct knowledge transfer sessions with Service Desk and Incident Response teams. ## Related Videos - [Agentic employees in world's most downloaded FinTech app](https://www.wearedevelopers.com/videos/100123-agentic-employees-in-world-s-most-downloaded-fintech-app) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Is your backend a hodgepodge of queues, event stores and cron jobs? Durable Execution to the Rescue.](https://www.wearedevelopers.com/videos/744-is-your-backend-a-hodgepodge-of-queues-event-stores-and-cron-jobs-durable-execution-to-the-rescue) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most) - [Logs in observability - Correlation](https://www.wearedevelopers.com/videos/1430-logs-in-observability-correlation) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)