Engineer

Systems Plus, Inc.

Washington, DC

JOB DETAILS
JOB TYPE
Full-time, Employee
SKILLS
Lean Six Sigma, User Acceptance Testing, ABET (Accreditation Board for Engineering and Technology), Test Tools, Application Integration, Atlassian JIRA, Design Document, Design Patterns Programming Methodologies, Performance Testing, Process Engineering, Quality Engineering, Release Management/Engineering, Requirements Validation/Verification, Test Data, Test Driven Development (TDD), Test Requirements, Test Scripts, Test Strategy, Use Cases, Microsoft Intune, Windows Autopilot, YubiKey, Configuration Management, Customer Support/Service, Documentation, Telemetry
QUALIFICATIONS
  • Eight (8) years of experience in Information Technology, Endpoint Engineering, or Cybersecurity.
  • Six (6) years of experience performing engineering (not help desk) functions in enterprise environments.
  • Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience). Formal education requirements may be waived based on relevant professional experience.
  • Experience working under formal change control, audit, and security governance processes.
  • Endpoint Imaging and Automation Engineering
  • Experience building and maintaining Windows and macOS workstation images.
  • Experience with image automation, validation, rollback, and version control.
  • Experience integrating images with VDI, EDR, authentication, and logging agents. Patch and Configuration Management Engineering
  • Hands-on experience using Ivanti and/or KACE for operating system and application patching.
  • Experience managing configuration drift, remediation workflows, and reporting.
  • Experience validating patches post-deployment and supporting rollback. Device Enrollment and Identity Engineering
  • Experience with Microsoft Intune/Windows Autopilot for provisioning/compliance enforcement.
  • Experience using JAMF Pro for macOS endpoint management.
  • Experience implementing passwordless authentication and hardware-backed credentials, including YubiKey, CAC, or software keys. Logging, Monitoring, and Telemetry Engineering
  • Experience configuring endpoint logging, including Windows Event Logs and macOS Unified Logs.
  • Experience forwarding and validating logs into SIEM/EDR platforms such as Microsoft Sentinel, not limited to Microsoft Sentinel.
  • Experience supporting forensic collection and audit readiness.
  • Top Secret (TS) security clearance
RESPONSIBILITIES
  • Design, implement, and tune engineering controls to detect and limit initial compromise and lateral movement. Integrate these activities into workstation imaging, device registration, and user registration processes to support secure baseline enforcement and accurate asset inventory management.
  • Design, implement, and maintain standardized endpoint configurations to support the security, compliance, and integrity of user devices and associated assets throughout their lifecycle using approved endpoint management and deployment tools, including Ivanti, KACE, Microsoft Intune, and Windows Autopilot, as applicable.
  • Own engineering design, validation, and lifecycle maintenance of imaging and patching processes to support consistent, secure workstation builds and timely vulnerability remediation. Assess and harden machine identity artifacts, engineer detection for persistence mechanisms, and develop remediation and recovery runbooks.
  • Ensure secure, consistent device enrollment and accurate asset tracking across the environment.
  • Support device provisioning, reassignment, decommissioning, secure wipe, recovery key escrow, and lifecycle visibility.
  • Ensure endpoints produce telemetry required for detection, troubleshooting, and forensics, and that telemetry flows to central systems in a reliable and auditable manner.
  • Follow the assessment-to-remediation workflow by performing technical assessments, producing Findings Reports, submitting Remediation Plans, obtaining required approvals, executing approved remediation during change windows, performing post-change validation, and publishing Validation Reports.
  • Produce engineering documentation, operational playbooks, user-facing runbooks, knowledge-transfer materials, and versioned knowledge-base content to make solutions operationally sustainable by the Service Desk and IRM teams.
LOCATION
Washington, DC
POSTED
3 days ago

This role designs, implements, and maintains endpoint security controls across the device lifecycle, from imaging and patching to detection of compromise and lateral movement. It combines hands-on engineering (endpoint configuration standards, telemetry, remediation runbooks) with a structured assessment-to-remediation process, and produces the documentation needed for Service Desk and IRM teams to sustain it long-term.

About the Company

S

Systems Plus, Inc.

Meet Systems Plus

Systems Plus, as a company, is a testament to its people’s hard work, dedication, and commitment to success. That commitment to success is seen by conducting business based on our Core Principles:  
 
AGILITY: With over 25 years of experience in the commercial, Federal, and Defense market, Systems Plus has proven its ability to adjust, withstand, and prosper in all economic climates. We embrace change by driving digital transformation and flexible processes for rapid-decision making.  
  
CURIOSITY: Systems Plus utilizes exploration and innovation to excel at creative problem solving, maximize creative thinking, and increase collaboration.  
 
TRUST: Systems Plus has become one of the most reputable businesses supporting the Federal market-space, consistently earning excellent performance references from its customers. We gain the trust of our clients by encompassing a deep understanding of their mission, unwavering commitment to excellence and quality, and practicing good judgement and expertise.  
  
PEOPLE: Systems Plus employs and retains highly qualified professionals because of its unique culture that is as much family oriented as it is encouraging each team member to develop their professional interests to maximize competencies, motivation, productivity, and quality solutions.  
  
VISION: Utilizing a wide variety of Contracting Vehicles and engagement strategies, and offering a diverse portfolio of services, Systems Plus is able to support their customers on a global scale and deliver results that meet their missions.

Our Philosophy

At Systems Plus, we’ve built more than a business — we’ve built a culture where people are inspired to do their best work. It’s a place where careers thrive, talent is recognized and big ideas are brought to life. Our success is powered by the innovation, passion and dedication of our people, and that’s what makes us different. If you’re ready to grow, be supported and take your career to the next level.

INDUSTRY
Government and Military