Endpoint Security Engineer
$125,000–$140,000 year
On-siteVienna, Virginia, United States
Job Summary
Design and enforce compliance policies within Workspace One, Microsoft Intune, and/or Jamf. Oversee mobile security controls including device encryption, lost/stolen device workflows, and remote wipe/lock actions. Conduct security reviews for OS updates, CVEs, and platform changes while developing automated compliance reporting using PowerShell. Respond to escalated security incidents involving managed endpoints and maintain documentation of security posture, SOPs, and enforcement standards. Collaborate with security teams to integrate conditional access, certificate policies, and identity-based access controls. Requires on-site support and ability to work with sensitive data in a controlled environment. Must obtain a public trust suitability determination prior to start.
Required Qualifications
- BS in IT or related field
- Minimum of 2–4 years of experience in UEM administration with security responsibilities
- Experience troubleshooting device compliance issues, policy conflicts, and non-compliance scenarios
- Experience collaborating with enterprise security and engineering teams
- Strong understanding of MDM/MAM security frameworks
- Hands-on experience configuring compliance, encryption, device restrictions, and mobile security controls
- Proficiency with PowerShell scripting for reporting and automation
- Familiarity with identity systems, conditional access, and platform SSO
- ITSM platform experience (BMC or ServiceNow)
- Must obtain an agency public trust suitability determination prior to start date
- Must have strong analytical skills
- Must be able to work with sensitive data in a controlled environment
- Ability to support after-hours response for critical security issues
- Ability to communicate effectively and efficiently with all levels of leadership
- Must have excellent verbal and written communication and stakeholder-facing skills
- Must be able to work independently and within a multi-disciplinary team to meet demanding deadlines in a fast-paced technology environment
- Must maintain a high level of customer service for all support interactions
Desired Qualifications
- Formal technical training, certifications, and/or additional experience may be substituted for the degree preference
- Experience with mobile threat defense platforms (MTD)
- Experience supporting a complex Federal agency enterprise
- Relevant security related certification(s) such as Security+, CASP+, Microsoft SC series, and/or Jamf 300+
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.