Develop, maintain, and optimize standard operating system images for all enterprise endpoint devices.
Own the full lifecycle of desktop OS platforms, including design, configuration, testing, release, documentation, and continuous improvement.
Manage deployment, maintenance, and version control for major enterprise applications and core endpoint software suites.
Lead the patch management process for operating systems, security updates, and application patches; ensure timely, compliant, and well-communicated release cycles.
Evaluate and integrate new tools, technologies, and methods to improve endpoint stability, security, and performance.
Collaborate with cybersecurity teams to ensure compliance with security policies, vulnerability remediation, and hardening standards.
Create and maintain technical documentation, configuration baselines, and operational procedures.
Provide Tier 3 support for escalated endpoint issues requiring deep technical expertise.
Monitor system performance, reliability, and patch compliance using enterprise management tools.
Participate in strategic planning for endpoint technology architecture and long‑term modernization efforts.

5+ years of progressively responsible endpoint administration experience.
Deploying, configuring, and managing Windows or ThinLinux end‑client operating system solutions.
Installing, configuring, monitoring, and troubleshooting Microsoft and third‑party enterprise applications across large endpoint environments.
Performing comprehensive operating system and application patching via MECM/SCCM, including researching updates, testing in controlled environments, deploying to production, troubleshooting failures, and executing rollback procedures when required.
Applying, validating, and maintaining security configurations based on Security Requirements Guides (SRGs) and Security Technical Implementation Guides (STIGs) for all supported endpoint platforms.
Managing endpoint configuration, compliance, and automation through enterprise tools such as MECM/SCCM, Intune, or similar technologies.
Diagnosing and resolving escalated endpoint issues requiring advanced technical knowledge of OS internals, application behavior, and configuration dependencies.
Performing post‑deployment remediation and cleanup patching using PowerShell or similar scripting tools to automate updates, enforce configuration baselines, and resolve inconsistent patch states.
TS/SCI clearance required with ability to obtain CI Poly.
Must meet DoD 8140/CSWF for 451-Intermediate or be willing to obtain the appropriate credential within 6 months

Endpoint Systems Administrator

Key skills