> Markdown version of [/jobs/ext/604898-endpoint-engineer-systems-administrator](https://www.wearedevelopers.com/jobs/ext/604898-endpoint-engineer-systems-administrator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Endpoint Engineer (Systems Administrator - **Company:** A1FED Incorporated - **Location:** San Antonio, TX, United States - **Contract:** Permanent contract - **Skills:** Application Integration Architecture, Application Packaging, Microsoft Azure, Mobile Application Development, Software as a Service, Configuration Management, Cyber Security, System Configuration, Firmware, Hyper-V, Identity and Access Management, System Center Configuration Manager, Windows Servers, Windows PowerShell, Zero Trust Network Access, Software Deployment, Software Engineering, Software Systems, Systems Integration, Microsoft Deployment Toolkit, Sysadmin, Microsoft InTune, Information Technology, Deployment Automation, Data Management, Scap Compliance Checker - **Published:** June 24, 2026 - **Apply:** https://www.dice.com/job-detail/a99ee6ca-ccbd-49b5-8041-fd834f7adce1 ## About the Role * Microsoft MECM (SCCM), Intune, MDT, PowerShell * Windows Server OS, Windows 10/11 * Hyper-V, Azure, Entra ID, GPO * ActivClient, eMASS, DISA STIG Viewer * SCAP Compliance Checker, NIST 800-series * Application packaging tools (AdminStudio, WiseScript, etc.) Education & Certification Requirements (per DoD 8140 Qualification Matrices) 1) Microsoft Certified: Azure Administrator Associate or Windows Server Hybrid Administrator Associate 2) Any of the following... * Academic Education: Bachelor's degree in information technology, Cybersecurity, or a related discipline. * OR Baseline: Cloud+ or GICSP or SSCP or Security+ or GSEC or GLSC or CISSP * OR DoD/Military Training: F07DZZ1 or M03385G or M10395B or M223854 or A-150-0045 now W-250-0750 or A-531-0021 or W-250-0750 or A-150-3400 now W-250-0750 or A-150-1980 or A-150-1202 or A-150-1203 or A-150-1250 or A-150-1855 / A-150-1940 or A-113-0205 or A-113-0175 or A-113-0018 or A-113-0382 or A-113-0027 or A-113-0383 or A-113-0175 or A-113-0202 or A-113-0233 or DISA-US1379 ## Description The Endpoint System Admin is responsible for architecting, developing, and sustaining endpoint management and delivery solutions that meet DoD and DHA operational and security requirements. This includes designing compliant application packaging, security configurations, software deployments, and mobile device solutions across the hybrid DHA ecosystem. The engineer will also lead Tier 3/4 support efforts, drive endpoint automation and modernization initiatives, and provide technical leadership in support of RMF and Zero Trust alignment., Application Integration & Enterprise Management: * Engineer and deploy endpoint management solutions (MECM, Intune, etc.) for both virtual and physical environments. * Package, test, and configure baseline applications and images for DHA endpoints. * Architect endpoint delivery frameworks to support centralized provisioning, patching, monitoring, and sustainment of services across hybrid (on-prem/cloud/SaaS) environments. * Engineer migration strategies from MECM to Intune and develop modern endpoint reporting capabilities. Endpoint & Identity Security: * Validate endpoint compliance with DISA STIGs, DoDI 8510.01 (RMF), and NIST cybersecurity standards. * Conduct risk assessments and apply IA controls across all application and OS lifecycle stages. * Engineer and maintain endpoint configurations supporting Zero Trust, encryption, data-at-rest (DAR), and continuous monitoring. * Maintain artifacts in eMASS, including POA&Ms, risk assessments, and continuous monitoring documentation. Desktop & Endpoint Engineering: * Build and maintain desktop OS images and standard software configurations for enterprise deployment. * Engineer solutions supporting task sequences, group policies, and profile/data management. * Modernize legacy configurations and support cloud-managed endpoints for improved user experience and performance. * Validate application compatibility and implement endpoint enhancements using industry best practices. Mobile Engineering: * Design and implement mobile device provisioning, OS/firmware upgrades, and security configurations. * Develop transition plans for migrating MDM platforms while preserving user experience and enterprise controls. Software Design & System Integration: * Research and develop system-level software solutions, including embedded systems and distribution frameworks. * Formulate operational specs and conduct in-depth requirement analyses to improve endpoint architectures. Application Packaging & Automation: * Engineer, script, and deliver application packages using enterprise deployment tools. * Test application delivery using hypervisors and simulate endpoint software combinations. * Ensure compliance with DISA/NIST STIGs in application packaging and configuration management. * Maintain application baselines and automate patching and updates. ## Related Videos - [Hacking MSSQL on Cloud. All of them. How I became sysadmin on Azure, AWS, GCP and Alibaba.](https://www.wearedevelopers.com/videos/100339-hacking-mssql-on-cloud-all-of-them-how-i-became-sysadmin-on-azure-aws-gcp-and-alibaba) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Playing Pong on a shoulder press machine](https://www.wearedevelopers.com/videos/100140-playing-pong-on-a-shoulder-press-machine) - [Fake or News: Self-Driving Cars on Subscription, Crypto Attacks Rising and Working While You Sleep - Théodore Lefèvre](https://www.wearedevelopers.com/videos/1793-fake-or-news-self-driving-cars-on-subscription-crypto-attacks-rising-and-working-while-you-sleep-theodore-lefevre) - [Agent Smith Gets Hardware: Autonomous IoT Hacking From Debug Port to Cloud API](https://www.wearedevelopers.com/videos/100258-agent-smith-gets-hardware-autonomous-iot-hacking-from-debug-port-to-cloud-api) - [When Agents Meet Legacy: Never Change a Running System](https://www.wearedevelopers.com/videos/100320-when-agents-meet-legacy-never-change-a-running-system) ## Related Articles - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Coding Boot Camps in Germany](https://www.wearedevelopers.com/magazine/237-best-coding-boot-camps-in-germany) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)