{"schemaVersion":"jobsearcher.job.v1","id":"9b6f0e40f65aa87be1b9baf4","url":"https://jobsearcher.com/jobs/9b6f0e40f65aa87be1b9baf4","canonicalUrl":"https://jobsearcher.com/jobs/9b6f0e40f65aa87be1b9baf4","title":"End-User Computing (EUC) Engineer","description":"End-User Computing (EUC) EngineerKoniag IT Systems, LLC, a Koniag Government Services company, is seeking an End-User Computing (EUC) Engineer to support KITS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.The End-User Computing (EUC) Engineer provides advanced engineering support for SBA's enterprise end-user computing environment, focusing on the design, engineering, automation, and sustainment of endpoint platforms, device management infrastructure, and end-user computing technologies.This role is distinguished from the Desktop / Field Support Technician by its focus on engineering, architecture, and platform-level work rather than individual incident resolution. The EUC Engineer designs and builds endpoint platforms, automation workflows, deployment pipelines, and configuration frameworks that enable the broader end-user services team to deliver consistent, high-quality support at scale.This individual must be capable of operating autonomously on complex engineering tasks, demonstrating deep expertise in Microsoft endpoint management, device lifecycle engineering, and end-user computing automation in a Federal enterprise environment.Key ResponsibilitiesEndpoint Platform Engineering:Lead engineering design, build, and optimization of SBA's enterprise endpoint computing platforms, including Windows 10/11 workstations, laptops, and mobile devicesDevelop and maintain endpoint configuration baselines, hardening standards, and compliance frameworks aligned with NIST SP 800-53, CIS benchmarks, and SBA cybersecurity requirementsEngineer and maintain Microsoft Intune policies, configuration profiles, compliance baselines, and application deployment packages for SBA's endpoint fleetDesign and implement Windows Autopilot deployment workflows for zero-touch device provisioning and refreshLead endpoint platform testing, validation, and quality assurance for configuration changes and new deploymentsEvaluate emerging endpoint technologies and recommend solutions aligned with SBA's enterprise environment and security requirementsSupport development and maintenance of the endpoint engineering roadmap in coordination with the End-User Services Lead and Microsoft Infrastructure teamDevice Management & Automation:Engineer and maintain automated device management workflows using Microsoft Intune, PowerShell, and related toolingDevelop and maintain software packaging, deployment automation, and application lifecycle management processesDesign and implement automated patch management and software update workflows for Windows endpointsBuild and maintain automation scripts and tools that reduce manual effort and improve consistency across end-user computing operationsEngineer self-healing and remediation automation workflows that proactively address common endpoint issues without requiring manual interventionSupport development and maintenance of endpoint monitoring and alerting configurations in coordination with the NOC and Infrastructure teamsConfiguration Management & Compliance:Develop and maintain endpoint configuration management documentation, baselines, and change recordsEngineer and maintain Group Policy Objects (GPOs) and Intune configuration profiles that enforce SBA security and compliance standardsSupport endpoint compliance monitoring and reporting, providing actionable data to the End-User Services Lead and Service Management teamLead remediation of endpoint compliance findings identified through security assessments, audits, and continuous monitoringCoordinate with the Microsoft Infrastructure Administrator (Senior) on endpoint security policy alignment and enforcementMaintain accurate and current endpoint configuration documentation in the Government ITSM platform and knowledge baseEnd-User Computing Infrastructure:Engineer and maintain Virtual Desktop Infrastructure (VDI) or Windows Virtual Desktop (Azure Virtual Desktop) environments as applicable to SBA's environmentSupport engineering and administration of enterprise software distribution platforms and application virtualization solutionsMaintain and optimize endpoint imaging and deployment infrastructure, including task sequences, driver libraries, and OS deployment workflowsEngineer and maintain mobile device management (MDM) configurations for SBA-issued smartphones and tabletsSupport integration of end-user computing platforms with Microsoft Entra identity, conditional access, and Zero Trust Architecture frameworksCoordinate with the Network Engineer T4 team on network requirements for endpoint management infrastructureSecurity Engineering & Zero Trust:Engineer endpoint security configurations aligned with Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09)Design and implement Microsoft Defender for Endpoint configurations, policies, and automated response workflowsSupport implementation of application control, device guard, and credential guard technologies across SBA's endpoint fleetEngineer and maintain endpoint data loss prevention (DLP) configurations in coordination with the Microsoft Infrastructure team and Purview compliance solutionsConduct endpoint security engineering reviews and provide recommendations for improving SBA's endpoint security postureSupport incident response activities involving endpoint security events in coordination with the NOC and Microsoft Infrastructure teamsKnowledge Management & Documentation:Maintain comprehensive and current documentation of all endpoint platform configurations, engineering decisions, and operational proceduresDevelop and maintain technical runbooks, engineering standards, and knowledge base articles for EUC engineering operationsEnsure all EUC engineering change activities are documented in the Government ITSM platform in accordance with ITIL 4 change management practicesProvide technical knowledge transfer to desktop support technicians and Service Desk staff on endpoint platform topicsSupport transition-in and transition-out activities by providing complete and accurate EUC engineering documentationSecurity & Compliance:Ensure all EUC engineering activities comply with FISMA, NIST SP 800-53, FedRAMP, and SBA cybersecurity policiesApply least-privilege and separation-of-duties principles to all endpoint management configurations and access controlsAdhere to all SBA policies regarding handling of CUI, SBU, and FOUO informationPromptly report suspected or confirmed security incidents involving endpoint platforms per SBA proceduresSupport FISMA assessment and authorization activities for endpoint-related systems and platformsRequired QualificationsExperience:Minimum 4–6 years of hands-on enterprise end-user computing engineering experienceDemonstrated experience engineering and administering Microsoft Intune and endpoint management platforms at enterprise scaleProven experience with Windows Autopilot, endpoint imaging, and automated deployment workflowsExperience developing PowerShell scripts and automation for endpoint management and administrationExperience in a Federal or private-sector enterprise environment of comparable scale, complexity, and security postureDemonstrated experience with endpoint security engineering, including Microsoft Defender for Endpoint and endpoint hardeningExperience implementing Zero Trust Architecture principles across enterprise endpoint environmentsFamiliarity with NIST SP 800-53 and CIS benchmark controls as applied to endpoint platformsTechnical ExpertiseExpert-level proficiency in:Microsoft Endpoint Manager (Intune) engineering, policy design, and automationWindows 10/11 platform engineering and configuration managementWindows Autopilot and zero-touch deployment workflowsPowerShell scripting for endpoint management and automationMicrosoft Defender for Endpoint configuration and policy managementGroup Policy Objects (GPOs) and Intune configuration profilesSoftware packaging, deployment automation, and application lifecycle managementEndpoint compliance monitoring and remediationStrong working knowledge of:Microsoft Azure Active Directory (Entra ID) and conditional accessZero Trust Architecture and OMB M-22-09 endpoint requirementsNIST SP 800-53 and CIS benchmark controls for endpointsAzure Virtual Desktop or Windows Virtual DesktopMicrosoft Purview DLP and information protectionITSM platforms (e.g., ServiceNow)ITIL 4 change and incident","company":"Koniag","rawCompany":"koniag","city":"Washington","state":"DC","isRemote":false,"isActive":false,"createdAt":"2026-10-16T13:20:05.689Z","occupations":[{"code":"15-1299.08","title":"Computer Systems Engineers/Architects","slug":"computer-systems-engineers-architects"},{"code":"15-1244.00","title":"Network and Computer Systems Administrators","slug":"network-and-computer-systems-administrators"},{"code":"15-1232.00","title":"Computer User Support Specialists","slug":"computer-user-support-specialists"}],"industries":[{"code":"541512","title":"Computer Systems Design Services","slug":"computer-systems-design-services"},{"code":"541511","title":"Custom Computer Programming Services","slug":"custom-computer-programming-services"},{"code":"921190","title":"Other General Government Support","slug":"other-general-government-support"}],"jobPosting":{"@context":"https://schema.org","@type":"JobPosting","title":"End-User Computing (EUC) Engineer","description":"End-User Computing (EUC) EngineerKoniag IT Systems, LLC, a Koniag Government Services company, is seeking an End-User Computing (EUC) Engineer to support KITS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.The End-User Computing (EUC) Engineer provides advanced engineering support for SBA's enterprise end-user computing environment, focusing on the design, engineering, automation, and sustainment of endpoint platforms, device management infrastructure, and end-user computing technologies.This role is distinguished from the Desktop / Field Support Technician by its focus on engineering, architecture, and platform-level work rather than individual incident resolution. The EUC Engineer designs and builds endpoint platforms, automation workflows, deployment pipelines, and configuration frameworks that enable the broader end-user services team to deliver consistent, high-quality support at scale.This individual must be capable of operating autonomously on complex engineering tasks, demonstrating deep expertise in Microsoft endpoint management, device lifecycle engineering, and end-user computing automation in a Federal enterprise environment.Key ResponsibilitiesEndpoint Platform Engineering:Lead engineering design, build, and optimization of SBA's enterprise endpoint computing platforms, including Windows 10/11 workstations, laptops, and mobile devicesDevelop and maintain endpoint configuration baselines, hardening standards, and compliance frameworks aligned with NIST SP 800-53, CIS benchmarks, and SBA cybersecurity requirementsEngineer and maintain Microsoft Intune policies, configuration profiles, compliance baselines, and application deployment packages for SBA's endpoint fleetDesign and implement Windows Autopilot deployment workflows for zero-touch device provisioning and refreshLead endpoint platform testing, validation, and quality assurance for configuration changes and new deploymentsEvaluate emerging endpoint technologies and recommend solutions aligned with SBA's enterprise environment and security requirementsSupport development and maintenance of the endpoint engineering roadmap in coordination with the End-User Services Lead and Microsoft Infrastructure teamDevice Management & Automation:Engineer and maintain automated device management workflows using Microsoft Intune, PowerShell, and related toolingDevelop and maintain software packaging, deployment automation, and application lifecycle management processesDesign and implement automated patch management and software update workflows for Windows endpointsBuild and maintain automation scripts and tools that reduce manual effort and improve consistency across end-user computing operationsEngineer self-healing and remediation automation workflows that proactively address common endpoint issues without requiring manual interventionSupport development and maintenance of endpoint monitoring and alerting configurations in coordination with the NOC and Infrastructure teamsConfiguration Management & Compliance:Develop and maintain endpoint configuration management documentation, baselines, and change recordsEngineer and maintain Group Policy Objects (GPOs) and Intune configuration profiles that enforce SBA security and compliance standardsSupport endpoint compliance monitoring and reporting, providing actionable data to the End-User Services Lead and Service Management teamLead remediation of endpoint compliance findings identified through security assessments, audits, and continuous monitoringCoordinate with the Microsoft Infrastructure Administrator (Senior) on endpoint security policy alignment and enforcementMaintain accurate and current endpoint configuration documentation in the Government ITSM platform and knowledge baseEnd-User Computing Infrastructure:Engineer and maintain Virtual Desktop Infrastructure (VDI) or Windows Virtual Desktop (Azure Virtual Desktop) environments as applicable to SBA's environmentSupport engineering and administration of enterprise software distribution platforms and application virtualization solutionsMaintain and optimize endpoint imaging and deployment infrastructure, including task sequences, driver libraries, and OS deployment workflowsEngineer and maintain mobile device management (MDM) configurations for SBA-issued smartphones and tabletsSupport integration of end-user computing platforms with Microsoft Entra identity, conditional access, and Zero Trust Architecture frameworksCoordinate with the Network Engineer T4 team on network requirements for endpoint management infrastructureSecurity Engineering & Zero Trust:Engineer endpoint security configurations aligned with Zero Trust Architecture principles (NIST SP 800-207, OMB M-22-09)Design and implement Microsoft Defender for Endpoint configurations, policies, and automated response workflowsSupport implementation of application control, device guard, and credential guard technologies across SBA's endpoint fleetEngineer and maintain endpoint data loss prevention (DLP) configurations in coordination with the Microsoft Infrastructure team and Purview compliance solutionsConduct endpoint security engineering reviews and provide recommendations for improving SBA's endpoint security postureSupport incident response activities involving endpoint security events in coordination with the NOC and Microsoft Infrastructure teamsKnowledge Management & Documentation:Maintain comprehensive and current documentation of all endpoint platform configurations, engineering decisions, and operational proceduresDevelop and maintain technical runbooks, engineering standards, and knowledge base articles for EUC engineering operationsEnsure all EUC engineering change activities are documented in the Government ITSM platform in accordance with ITIL 4 change management practicesProvide technical knowledge transfer to desktop support technicians and Service Desk staff on endpoint platform topicsSupport transition-in and transition-out activities by providing complete and accurate EUC engineering documentationSecurity & Compliance:Ensure all EUC engineering activities comply with FISMA, NIST SP 800-53, FedRAMP, and SBA cybersecurity policiesApply least-privilege and separation-of-duties principles to all endpoint management configurations and access controlsAdhere to all SBA policies regarding handling of CUI, SBU, and FOUO informationPromptly report suspected or confirmed security incidents involving endpoint platforms per SBA proceduresSupport FISMA assessment and authorization activities for endpoint-related systems and platformsRequired QualificationsExperience:Minimum 4–6 years of hands-on enterprise end-user computing engineering experienceDemonstrated experience engineering and administering Microsoft Intune and endpoint management platforms at enterprise scaleProven experience with Windows Autopilot, endpoint imaging, and automated deployment workflowsExperience developing PowerShell scripts and automation for endpoint management and administrationExperience in a Federal or private-sector enterprise environment of comparable scale, complexity, and security postureDemonstrated experience with endpoint security engineering, including Microsoft Defender for Endpoint and endpoint hardeningExperience implementing Zero Trust Architecture principles across enterprise endpoint environmentsFamiliarity with NIST SP 800-53 and CIS benchmark controls as applied to endpoint platformsTechnical ExpertiseExpert-level proficiency in:Microsoft Endpoint Manager (Intune) engineering, policy design, and automationWindows 10/11 platform engineering and configuration managementWindows Autopilot and zero-touch deployment workflowsPowerShell scripting for endpoint management and automationMicrosoft Defender for Endpoint configuration and policy managementGroup Policy Objects (GPOs) and Intune configuration profilesSoftware packaging, deployment automation, and application lifecycle managementEndpoint compliance monitoring and remediationStrong working knowledge of:Microsoft Azure Active Directory (Entra ID) and conditional accessZero Trust Architecture and OMB M-22-09 endpoint requirementsNIST SP 800-53 and CIS benchmark controls for endpointsAzure Virtual Desktop or Windows Virtual DesktopMicrosoft Purview DLP and information protectionITSM platforms (e.g., ServiceNow)ITIL 4 change and incident","datePosted":"2026-10-16T13:20:05.689Z","dateModified":"2026-10-16T13:20:05.689Z","hiringOrganization":{"@type":"Organization","name":"Koniag","sameAs":"https://jobsearcher.com"},"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressLocality":"Washington","addressRegion":"DC","addressCountry":"US"}},"identifier":{"@type":"PropertyValue","name":"JobSearcher","value":"9b6f0e40f65aa87be1b9baf4"},"url":"https://jobsearcher.com/jobs/9b6f0e40f65aa87be1b9baf4"}}