Minimum 8 years of experience in IT, endpoint engineering, or cybersecurity
At least 6 years of hands-on engineering experience
Proven experience building, maintaining, and supporting Windows workstation images
Strong experience administering Microsoft Intune and Windows Autopilot
Requirements:
Designing, implementing, and maintaining secure, scalable endpoint solutions
Building, maintaining, and supporting Windows workstation images
Administering Microsoft Intune for endpoint provisioning and configuration management
Implementing and managing Conditional Access policies within Microsoft Entra ID
Job description
Microsoft Endpoint SME (Windows Imaging / Intune / Endpoint Security) Clearance: Active Top Secret (TS) Required Location: Remote / Customer Site as Required
Position Overview Nationwide IT Services (NIS) is seeking an experienced Microsoft Endpoint Subject Matter Expert (SME) to support our Endpoint Engineering team. The ideal candidate will possess deep expertise in Windows endpoint management, image engineering, Microsoft Intune, Windows Autopilot, Group Policy, and endpoint security technologies. This role is responsible for designing, implementing, and maintaining secure, scalable endpoint solutions in highly regulated environments.
Required Qualifications:
Minimum 8 years of experience in IT, endpoint engineering, or cybersecurity.
At least 6 years of hands-on engineering experience (not help desk support) operating within formal change management, audit, compliance, and governance frameworks.
Proven experience building, maintaining, and supporting Windows workstation images, including image automation, testing, version control, deployment, and rollback processes.
Strong experience administering Microsoft Intune and Windows Autopilot for endpoint provisioning, configuration management, and compliance enforcement.
Advanced knowledge of Group Policy Objects (GPOs) and enterprise endpoint management.
Experience implementing and managing Conditional Access policies within Microsoft Entra ID (Azure AD).
Experience with passwordless authentication and hardware-backed credential solutions.
Familiarity with Ivanti and/or KACE patch management platforms.
Experience integrating endpoint logs and security telemetry with Microsoft Sentinel.
Technical Skills
Windows Endpoint Imaging and Deployment
Microsoft Intune
Windows Autopilot
Group Policy Administration (GPO)
Microsoft Entra ID / Conditional Access
Passwordless Authentication Technologies
Ivanti / KACE Patch Management
Microsoft Sentinel Logging and Monitoring
Endpoint Security and Compliance Management
Education & Certifications
Bachelor’s degree preferred; equivalent relevant experience may be considered at the discretion of the Contracting Officer Representative (COR).
Active Top Secret (TS) clearance is required.
Microsoft certifications, such as Microsoft Certified: Endpoint Administrator Associate, is highly desirable.
Why Nationwide IT Services? At Nationwide IT Services, we deliver exceptional solutions for our government customers and invest in our employees' growth and success. We offer a collaborative, mission-focused environment that embraces innovation, professional development, flexible work arrangements, and modern technology solutions.
