Workstation and Engineering Lead

who we are Message from the Chairman Vision, Mission & Core Values HerStory Leadership Qualifications Certifications Community what we do Cyber and Big Data DevSecOps Managed Services how we do it ActioNetAgile ActioNetCyber ActioNet360 ActioNetHosting ActioNetDesk ActioNetMobility who we serve Customers Case Studies Contracts Partners what's up? ActioNews Trade Shows Publications Accomplishments Press Releases ActioNet Blog contact us careers Home /  Become One Of Us! /  Search Jobs /  Workstation and Engineering Lead Workstation and Engineering Lead | Req#4311 Rockville, Maryland Apply Description The Workstation and Engineering Lead is responsible for the architecture, engineering, configuration management, security compliance, and lifecycle management of the enterprise workstation and endpoint environment supporting users across headquarters and regional locations. Location: Rockville, MDSalary:  135,000-171,000Clearance:  Secret or L Clearance Responsibilities:Engineer and maintain enterprise workstation environments including Windows desktop operating systems, endpoint configuration baselines, image management processes, device provisioning standards, and secure configuration enforcement aligned with enterprise technical standards• Administer endpoint management platforms including Microsoft Intune and related configuration management tools to enforce patch compliance, device encryption, application deployment standards, and endpoint security configurations consistent with industry cybersecurity control frameworks• Oversee enterprise patch management cycles for endpoints, ensuring timely vulnerability remediation, documentation within ITSM change workflows, and validation of successful deployment prior to closure• Coordinate with Identity, Credential, and Access Management (ICAM) leadership to ensure workstation authentication controls, MFA enforcement, certificate deployment, and conditional access configurations are functioning properly within Microsoft Entra ID and Microsoft 365 integrations• Validate endpoint log forwarding and monitoring integration with enterprise SIEM and monitoring platforms to ensure visibility into device health, configuration compliance, and potential security anomalies• Produce and maintain workstation engineering documentation including gold image standards, configuration baselines, lifecycle refresh schedules, and compliance dashboards for executive review• Support root cause analysis for enterprise-wide endpoint incidents, configuration conflicts, or patch deployment failures and implement corrective actions to prevent recurrence• Participate in Change Advisory Board (CAB) reviews to assess risk and approve major workstation environment changes prior to deployment Requirements: Bachelor’s Degree; 8+ years relevant experience; oversee engineering activities supporting enterprise information systems; design, integrate, and optimize hardware and software infrastructure; execute risk assessments; develop mitigation strategies; ensure systems meet stability, integrity, and performance requirements.Masters + 6yrs, or Associates +10yrs of relevant experience may be substituted.• Experience engineering enterprise Windows desktop environments and secure configuration baselines• Knowledge of endpoint management platforms including Intune or similar device management tools• Experience administering endpoint patch management and application deployment processes• Familiarity with endpoint encryption, Defender security controls, and compliance reporting• Experience integrating workstation logs with SIEM platforms• Knowledge of lifecycle refresh planning and endpoint inventory management• Preferred Certifications: Microsoft Certified: Endpoint Administrator Associate; CompTIA Security+SECRET Clearance or L Clearance   ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO...