Workstation Endpoint Engineer II
About this role
Empower, Innovate, Impact! At Team A-TEK, we EMPOWER people to drive INNOVATION that IMPACTS mission!
A-TEK operates at the intersection of mission and innovation by applying our deep domain expertise across the federal markets. Embracing our digital-first strategy, A-TEK provides enhanced capabilities in application development, digital transformation, enterprise IT, and scientific services. Our solutions are designed to modernize, automate, secure, protect, and enhance the operations of our federal clients, ensuring they stay ahead in a rapidly evolving digital landscape.
Our work is fueled by a passion to serve our clients’ needs and to protect the safety and welfare of Americans. That passion shapes how we nurture our most valuable asset – Our Employees. A-TEK actively cultivates the talent that drives our success and fosters a creative, challenging, and mission-driven work environment for current and future employees.
A-TEK is seeking a motivated Workstation Endpoint Engineer II to support our Federal Customer in Montgomery, MD. The Workstation Endpoint Engineer II is responsible for the design, deployment, security, and continuous management of the enterprise workstation environment. This mid-level role focuses on optimizing operating system deployments, automating software delivery, and ensuring strict endpoint compliance across all physical and virtual workstations. The ideal candidate will bridge the gap between day-to-day endpoint troubleshooting and strategic infrastructure engineering, leveraging modern mobile device management (MDM) platforms to support a secure and distributed workforce. Ability to obtain and retain a public trust level clearance is required for consideration. This position is on-site in Rockville, MD
Responsibilities and Duties:
- Endpoint Management & MDM: Administer and optimize unified endpoint management tools like Microsoft Intune or SCCM/MECM to manage Windows and macOS devices.
- OS Deployment & Provisioning: Develop, test, and maintain enterprise operating system images and modern provisioning profiles (e.g., Windows Autopilot).
- Automation & Scripting: Write and maintain PowerShell or Bash scripts to automate routine deployment tasks, application packaging, and configuration changes.
- Security & Compliance: Implement and enforce endpoint security policies, including patch management, antivirus definitions, encryption settings (BitLocker/FileVault), and vulnerability remediation.
- Asset Tracking & Logistics: Monitor endpoint health, manage software license distributions, and ensure hardware asset lifecycles align with configuration management data.
- Tier 3 Engineering Support: Act as the escalation point for complex technical issues relating to workstation performance, network connectivity, and core business software.
Required Qualifications
- Experience: 3–5 years of dedicated experience in enterprise desktop engineering, systems administration, or unified endpoint management.
- Technical Stack Proficiency: Hands-on administration experience with Microsoft Intune, SCCM, or Jamf Pro.
- Scripting Skills: Demonstrated proficiency with PowerShell for automation and environment configuration.
- Security Frameworks: Familiarity with federal hardening guidelines, such as NIST standards, STIG compliance, or CIS benchmarks.
- Education & Certifications: Bachelor’s degree in a relevant field or equivalent technical certifications (e.g., Microsoft Certified: Endpoint Administrator Associate).
Preferred Qualifications
- Experience managing virtualized environments (e.g., Azure Virtual Desktop, VMware Horizon).
- Prior experience supporting federal agencies (such as the NIH or FDA) under formal project management structures.
Technical Skills
- Microsoft Intune & MECM/SCCM administration.
- macOS & iOS management using Jamf Pro.
- Automated device provisioning via Windows Autopilot.
- PowerShell and Bash scripting for automation.
- Application packaging using MSI/EXE silent deployment.
- OS update management with Windows Update for Business.
- Third-party software patching and vulnerability remediation.
- EDR deployment via Defender for Endpoint or CrowdStrike.
- EDR deployment via Defender for Endpoint or CrowdStrike
- Virtualization management using Azure Virtual Desktop or VMware.
Compensation
Salary Range: $60,000 – $70,000 annually (commensurate with experience)
Benefits: Health, dental, and vision insurance; 401(k) with employer match; paid time off; professional development opportunities.
Why Join Us?
This is an opportunity to make a direct impact on healthcare data processes that support critical regulatory functions. You will collaborate with dedicated professionals, work on meaningful projects, and contribute to improvements in public health systems.
#LI-OnSite
Candidates may use tools (including AI) for proofreading or formatting; however, using any tool to fabricate, exaggerate, or misrepresent qualifications, experience, or work product is not permitted. We may assess application materials for job-related technical depth, internal consistency, and demonstrated hands-on experience, including through follow-up questions, skills assessments, or reference checks. Verification of education may be requested before or during the hiring process.
For security and identity verification purposes, participants may be asked to temporarily disable virtual backgrounds during portions of the call.
Misrepresentation or falsification may result in removal from further consideration. Candidates who need a reasonable accommodation in the application or interview process may request one.
A-TEK, Inc. is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or status as a qualified individual with a disability, or Vietnam era or other protected Veteran status.
Company at a glance
As a trusted services and solutions provider, A-TEK, Inc. and its subsidiary, Mackson Consulting, provides high-end digital services and solutions, coupled with a scientific staffing capability that supports FedCivilian, FedHealth, and National Security missions. We are proud to partner with our customers which include U.S. Department of Homeland Security, Health and Human Services (National Institutes of Health (NIH), Food and Drug Administration (FDA), Centers for Medicare & Medicaid Services (CMS)), Department of Commerce (DoC), and Department of Justice (DoJ). For nearly 30 years A-TEK has applied its domain expertise across the federal markets with our enhanced capabilities in application development, enterprise IT, and scientific services that optimize, modernize, secure, protect, improve, and comply with customers’ needs.
A-TEK's program engagement model employs methodologies and strategies based on PMBOK, ITIL, ISO 9001:2015, 27000, 20000, certified quality assurance processes, and CMMI ML 3 DEV and SVCS appraisals to successfully meet schedule, budget and performance objectives.
A-TEK, Inc. is an Equal Opportunity, Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or status as a qualified individual with a disability, or Vietnam era or other protected Veteran status.
Contract Vehicles
NIH CIO-SP3 IT Services - HHSN316201200006W (A-TEK)
NIH CIO-SP3 SB IT Services - 75N98121D00006 (MACKSON)
GSA Multiple Award Schedule (MAS) Innovative IT products, services and solutions at your fingertips. 47QTCA19D00J1
GSA Schedule 6211 - VA Affairs-Professional & Allied Healthcare Staffing: 36F79718D
Top Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- 401(k) With Employer Match
- Paid Time Off
- Professional Development Opportunities
Tired of cold applications?
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Know someone who'd be great for this?