Senior Endpoint Engineer (Intune, Autopilot, PowerShell)

About the role

CACI is seeking a Senior Endpoint Engineer to join its team on a contract supporting the Department of Homeland Security. The role sits with a team of Windows cloud engineers and security specialists who have deep experience in Windows, Intune, Autopilot, enterprise patching, PKI/certificates, Azure Active Directory, virtualization, cloud and scripting. The engineer works across endpoint management and server operations teams, driving automation through scripting and testing of new technologies to speed up deployments and reduce workload.

Key responsibilities

• Support Intune administration and engineering, including compliance policies for conditional access, application deployment and patching, and management and troubleshooting
• Use Windows Update for Business to keep Windows workstations patched to the correct level
• Create and deploy Intune configurations, policies and settings
• Manage and maintain Windows 11 workstation baseline configurations
• Support and troubleshoot Windows Autopilot
• Identify, analyze and resolve system problems with short-term workarounds and long-term solutions
• Package software and updates for test and production environments
• Develop security baselines based on the recommendations of the Engineering and Security teams
• Create reports on device compliance, application deployment, patch management and software inventory
• Write PowerShell scripts to automate systems administration tasks
• Respond to escalated service desk and team requests, and guide less-experienced systems engineers
• Act as liaison with clients, taking part in meetings, and take part in special projects as required

Required profile

• Ability to attain DHS EOD clearance
• BA degree plus 10 years of applicable experience, or AA degree plus 12 years, or 16 years of experience
• Intune experience supporting software packaging and patching
• Windows Autopilot experience
• EntraID (Azure AD) experience
• Solid knowledge of PowerShell scripting

Required skills

• Expert knowledge of packaging, testing, deployment and issue remediation
• Desired: ITIL v3 or v4 certification, MCSE, Endpoint Administrator Associate (Microsoft 365), STIG policy, vulnerability management, cloud management, AVD management

What we offer

• Proposed pay range of $98,500-$206,800, depending on location, contract category, experience and skills
• Healthcare, wellness, financial, retirement, family support, continuing education and time-off benefits
• Flexible time off and learning resources