Perform Endpoint/identity/device-lifecycle engineering to reduce unauthorized discovery, lateral movement, credential misuse, and persistence
Designs/maintains secure macOS & Windows workstation images (on-site + VDI/remote)
Engineers patching/version control (Ivanti, KACE, Intune, GPO)
Supports Intune/Autopilot enrollment with passwordless auth & hardware keys (YubiKey, CAC)
Builds logging/telemetry into SIEM/EDR
Runs assess→ recommend →approve → implement → validate workflow
Produces runbooks and KT

Active Top Secret Clearance
8 yrs IT/Endpoint Engineering/Cybersecurity
6 yrs engineering (not help desk) in enterprise environments
Experience under formal change control/audit/security governance
Windows & macOS image build/automation/rollback/version control
VDI/EDR/auth/logging agent Integration
Ivanti/KACE patching
Intune/Autopilot/JAMF
Passwordless & hardware-backed credentials
Endpoint logging (Windows Event, macOS Unified Logs) into SIEM (e.g., MS Sentinel)
Forensic collection/audit readiness
Preferred education: Bachelor's (IT/Cyber/related); substitutable by experience per COR

Systems Engineer

Key skills