Endpoint Engineer

This role is supporting a Christian Faith-Based NGO.

Onsite Requirement: 2-3 days per week in Arlington, VA

Salary Range: 90-110K

The Need

The Endpoint Engineer will join our Global Technology Services team, supporting technology across all IJM global offices. This role is critical in developing and maintaining secure and distributed endpoint environments, ensuring seamless operations from device procurement to final disposal.

The Endpoint Engineer will manage the entire endpoint lifecycle, including baseline OS configurations, security agents, policy settings, and software profiles. The role encompasses oversight of deployment, patching, and endpoint management tools, and serves as a technical escalation point for the Global Service Desk and other GTS teams.

This position is based at IJM Headquarters in the Washington, DC area, with a preference for on-site work 3 days per week. Remote candidates will be considered, with required quarterly visits to DC.

Responsibilities

Project and Operational Management

Identify opportunities for continuous service improvement (CSI) and develop CSI plans.

Provide expert technical guidance to ServiceDesk and GTS on emerging technologies.

Lead the implementation of new endpoint software and hardware into the IJM environment.

Manage the engineering cycle for end-user hardware and software, coordinating endpoint engineering activities.

Oversee installation, configuration, and support for remote management tools.

Conduct regular OS and application patching.

Document work within the IT Service Management platform, including Incident, Request, Change, and Problem management.

Documentation & Reporting

Develop Standard Operating Procedures (SOPs) for desktop software, hardware, application patching, endpoint deployment, and management.

Maintain comprehensive documentation using the ServiceNow ITSM platform.

Support and configure the ServiceNow platform, assisting with the asset management lifecycle.

Monitor and troubleshoot integrations of laptop software and hardware in the IJM environment.

Training & Communications

Translate customer needs into system, hardware, software, and network requirements.

Train Service Desk team members on new software, hardware, and application patching efforts.

Provide input on the configuration and maintenance of MS Teams, Office 365, and the Digital Adoption Platform.

Manage critical issue escalation and support technicians in vulnerability remediation efforts.

Requirements

Experience

7 years of extensive hands-on experience supporting Windows and MAC endpoints in an MS 365 environment.

Proven experience managing a fleet of 500 devices for over 4 years.

Demonstrated success in migrating laptops from on-prem to Intune (Hybrid and Cloud join) at least 3 times.

Experience in providing Tier 3 support to desktop support technicians.

Technical Skills

Strong foundation in enterprise IT operations, including networking, Cloud computing, and cybersecurity.

Advanced expertise in Intune and Entra Administration and Architectural roles, with in-depth knowledge of Autopilot, Co-management, Conditional Access, device policies, and MAM for iOS and Android.

Proficiency in PowerShell, Active Directory, policy setup, orchestration, and automation.

Experience managing macOS devices; Kandji preferred.

Familiarity with asset management; experience with ServiceNow preferred.

Experience with a range of endpoint technologies, including STIG/USGCB guidelines, MDT, SCCM, BitLocker, and VPN/Citrix environments.

Critical Qualities

Builder mentality, focusing on developing and implementing new processes and technologies.

Ownership of endpoint management, with strong project management and process improvement skills.

Creative problem-solver with a proactive, self-starting approach.

Strong interpersonal skills, effective communication, and collaboration with global cross-functional teams.

Education

Bachelor’s degree in computer science or any equivalent combination of education, experience, and certification.

Location

Arlington Hybrid preferred (3 days/week in the office).

Remote candidates considered with quarterly visits to DC.