Security Endpoint Engineer

About NFF Networking for Future, Inc. (NFF) is a Washington, DC based company offering a performance-focused approach to delivering transformational IT business solutions. We take pride in keeping users productive and engaged by providing business and IT teams with the solutions they need to improve their performance in a dynamic, connected world. NFF is the only Cisco Gold Partner headquartered in the District of Columbia with Advanced Specializations in all major IT disciplines. In addition to Cisco, NFF holds key strategic partnerships with VMware, NetApp, Microsoft, Riverbed, Splunk and many System Integrators. NFF is an ISO 9001:2015 certified company and has been ranked in Inc. Magazine's 500/5000 Fastest Growing Companies list since 2007. We offer expert solutions relevant to: Network Infrastructures, Data Center & Cloud, Network & Endpoint Security, Application Assurance, Collaboration & Mobility and Staff Augmentation. About this Position / Responsibilities The Endpoint Engineer/Administrator will be intimately familiar with next generation Endpoint management/protection platforms including but not limited to Microsoft Intune, Ivanti provisioning and patching management, Jamf macOS device management and CrowdStrike security. The engineer must have mastery level skill with Endpoint Device and patch Management. Hands on experience with implementing and managing the following technologies like Device Provisioning, Windows Autopilot, Creation and Configuration of device policies, Software Packaging & distribution, Windows OS and software patching, reporting in Intune using Graph explorer and API. To be successful in this position, the candidate will be responsible for managing the endpoint devices within our organization, ensuring that they are secure, up-to-date, and functioning at peak performance. As an Endpoint Engineer, the candidate also be responsible for providing support to end-users, troubleshooting issues, and identifying areas for improvement. Must display excellent teamwork skills, technical, written, and oral communication skills, and ability to learn and adapt in a fast-paced environment. The candidate must have in depth knowledge of the afore-mentioned point products and can formulate Security policy and manage Security configuration. Specific Tasks Day-to-day administration of our MDM environment, including Configuration of Intune and Autopilot. Maintain the development, test and production environments Manage various device policies and desktop applications in Microsoft Intune and JamF within the organization. Deploy software updates, Windows OS patches, and updates to endpoints using automated tools. Develop and maintain endpoint operating system infrastructure and perform day to day tune up and maintenance as required policies and procedures. Manage various components of Azure AD, Intune, Ivanti and Jamf Troubleshoot endpoint issues and provide support to end-users. Create and update endpoint agent polices as per requirements. Provide assistance and validation of implementation timelines and delivery management. Communicate clearly to executive management/end users and manage the reporting process. Coordinate and drive Endpoint solutions and direction to achieve measurable increases in OS deployment, end-user knowledge, and operations. Application Packaging / scripting for deployment of apps on Windows and macOS. Provide up to date information on SW updates and alerts. Support team in the design and implementation of highly available, scalable, and secure modern mobility solution using industry best practices on Microsoft Intune and AzureAD + other 3rdparty technologies. Create and maintain technical documentation as well as assist with training and related materials as needed. Responsibilities The Endpoint Engineer is responsible for effective Device provisioning, Software and policy installation/configuration, operations, and maintenance of device management infrastructure. Participates in technical research and development to enable continuing innovation within the infrastructure. Ensures that system hardware, operating systems, software systems, and related procedures adhere to District policies, standards, and guidelines. Endpoint engineering and provisioning, operations and support, maintenance and research and development to ensure continual innovation. Device provisioning for new and existing devices using Windows Autopilot, configuration of device-based policies, applications, services, settings in accordance with standards and project/operational requirements. Performs daily system monitoring, verifying the systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs such as backups. Performs regular security monitoring to identify any possible intrusions. Deploy Operating system images, software packages, device configuration policies, patches, and updates to endpoints using automated tools like Intune, Ivanti and JamF. Provides Tier III support per request from various agencies. Investigates and troubleshoots issues. Diagnoses and recovers from software failures. Coordinates and communicates with impacted agencies. Applies operating system (OS) patches and upgrades on a regular basis and upgrades administrative tools and utilities. Upgrades and configures system software that supports infrastructure applications or Asset Management applications per project or operational needs. Expertise in implementing, administrating and operating information security technologies such as firewalls, IDS/IPS, SIEM, Antivirus, network traffic analyzers and malware analysis tools. Utilizes advanced experience with scripting and tool automation such as Perl, PowerShell, Regex. Develops, leads, and executes information security incident response plans. Develops standard and complex IT solutions & services, driven by business requirements and industry standards. May also leverage dynamic and static code assessment tools to measure vulnerability of applications throughout the SDLC. Qualifications Demonstrated experience in Device Management Required 6 Years Demonstrated experience with Microsoft Intune Required 3 Years Demonstrated experience using Device Provisioning Required 2 Years Demonstrated experience with PowerShell and Shell scripting Required 3 Years Demonstrated experience with Endpoint Security management solutions Required 3 Years Software Packaging & Distribution Required 4 Years Device policies, settings, and registry Required 4 Years Operating system (OS deployment, patches, and upgrades) Required 4 Years Windows Autopilot Provisioning Required 2 Years BS Degree in IT, Cybersecurity, Engineering, or equivalent experience Required. Endpoint Engineer subject-matter expert (SME). Experience in managing Azure AD, Intune, Ivanti (Jamf would be a plus) BS computer science/IT/SW or related field data security and networking experience required. NFF Disclosures NFF offers a competitive salary, comprehensive benefits and flexible paid time off options, for eligible employees: Medical, Dental and Vision, Health Savings Account, Flexible Spending Account STD, LTD, Supplemental Life insurance and AD&D Comprehensive 401k plan Paid Time Off 10 paid holidays NFF is an Equal Opportunity Employer.