As the Endpoint/MDM Engineer, you will play a key role in managing and securing all endpoints and mobile devices across the BCG Federal organization in a Microsoft GCC High environment. You will work with platforms like Microsoft Intune, Jamf, and Tanium to ensure that Windows laptops, MacBooks, and mobile devices are secure, up-to-date, and functioning efficiently. This role includes creating and managing the laptop images for both Windows and Mac devices, ensuring consistency across deployments. Additionally, you will collaborate with the IT Service team to maintain high standards of image quality and end user satisfaction. 

Endpoint Management:

• Build, maintain, and update the laptop images for Windows and MacBook devices, ensuring they are secure, up-to-date, and optimized for performance. 

• Manage the configuration and deployment of Microsoft Intune, Tanium, and Jamf for endpoint devices. 

• Work closely with the Cloud Engineer to maintain the Azure VDI image to ensure it is secure, up-to-date, and optimized for performance. 

• Implement and maintain endpoint security policies to protect the organization’s IT infrastructure. 

• Handle software packaging, deployment, and patch management to keep devices secure and up to date. 

• Conduct regular maintenance and optimization of endpoint systems, identifying opportunities for improvement. 

• Maintain the device catalog and assess new laptop models and accessories for performance and quality. 

Mobile Device Management (MDM):

• Manage and support iOS devices using Microsoft Intune, including administering Apple Business Manager (ABM) for DEP/VPP. Experience with Android Enterprise is preferred but not required. 

• Develop and maintain mobile security policies and ensure seamless integration with the organization’s broader IT infrastructure. 

• Oversee the enrollment of new mobile devices, ensuring they are properly configured, secured, and tracked throughout their lifecycle. 

• Serve as an escalation point for user troubleshooting with mobile devices, providing advanced support and resolving issues. 

• Stay up to date with the latest developments in mobile device management, security best practices, and emerging technologies. 

• Strong knowledge and hands-on experience with Microsoft Intune, Jamf, and Mobile Device Management (MDM) platforms. 

• Proficiency in scripting for device management, using tools like PowerShell and VBScript. 

• Solid understanding of network security technologies such as Zscaler and DNS, and their integration with endpoint management. 

• Excellent troubleshooting skills for resolving issues with both endpoint and mobile devices. 

• Clear and effective communication, with the ability to work independently and as part of a team. 

• Strong ability to manage multiple tasks in a fast-paced environment, ensuring projects are completed on time. 

• Skilled in documenting procedures, configurations, and policies for future reference and compliance purposes.

Education: 

• Bachelor’s degree in computer science, Information Technology, Software Engineering, or a related field. 

Experience: 

• 5 years of IT experience with a focus on Endpoint Management and Security, preferably in a Microsoft GCC High environment. 

• 2 years of experience with MDM tools like Microsoft Intune and Jamf, including Apple Business Manager. Android Enterprise a plus.

• Hands-on experience with scripting for endpoint management. 

Certifications (Preferred): 

• Microsoft Certified: Intune and Azure certifications are highly desirable. 

Security Requirements: 

• US Citizenship and ability to obtain and maintain a Secret clearance. #LI-JS3