Endpoint Systems Management Engineer

Are you ready for your next career challenge? At Leidos, we deliver innovative solutions through the efforts of our diverse and talented people who are dedicated to our customers’ success. We empower our teams, contribute to our communities, and operate sustainably. Everything we do is built on a commitment to do the right thing for our customers, our people, and our community. Our Mission, Vision, and Values guide the way we do business.

The Mission Drivers Enablement Center (MDEC) at Leidos currently has an opening for a Vulnerability Management Analyst to support our Blacksburg Virginia Enterprise IT Operations Center.  The Endpoint Systems Management Engineer will work as a member of the Vulnerability Management Team and to support security, patching, availability, administration, operations and maintenance for a Department of War Agency. The Endpoint Systems Management Engineer will receive on the job and formal training and will be required have significant expertise in multiple system administration areas including MCEM, Windows, and scripting. This is viewed as a critical role within the team and will contribute substantially to the team’s success.

The Mission Drivers Enablement Center (MDEC) at Leidos currently has an opening for a Endpoint Systems Management Engineer to support our Blacksburg Virginia Enterprise IT Operations Center.  The Endpoint Systems Management Engineer will work as a member of the Vulnerability Management Team and to support security, patching, availability, administration, operations and maintenance for a Department of War Agency. The Endpoint Systems Management Engineer will receive on the job and formal training and will be required have significant expertise in multiple system administration areas including MCEM, Windows, and scripting. This is viewed as a critical role within the team and will contribute substantially to the team’s success.

Primary Responsibilities:

• Provide full administration and ownership of the MECM (SCCM) environment, including management of a consolidated single-site hierarchy following CAS and secondary site decommissioning
• Manage a distributed endpoint environment across ~30 remote sites, including oversight of Management Points (MPs) and Distribution Points (DPs) to ensure efficient content delivery and system performance
• Oversee endpoint lifecycle management, including:
• Operating system deployment (OSD) and imaging solutions for decentralized site-based imaging
• Application packaging, deployment, and maintenance
• Lead enterprise patch management operations, including:
• Server and workstation patching
• WSUS administration and software update deployment
• Compliance monitoring and remediation
• Administer and support enterprise application management, including third-party platforms such as Adobe and Autodesk
• Perform Active Directory engineering and support, including:
• Group Policy design and management for servers and workstations
• Certificate Services and PKI administration
• Support infrastructure engineering and modernization efforts, including:
• Server builds, upgrades, and OS migrations (Windows Server 2016 → 2019 → 2025)
• Deployment of new Distribution Points and infrastructure components
• Implementation of security controls such as Secure Boot
• Build and maintain systems aligned with DoD/DWIA or secure environment requirements
• Support and integrate Microsoft 365 and Intune, including:
• Application deployment
• Configuration policies
• Endpoint management modernization initiatives
• Collaborate with infrastructure teams supporting virtualized environments (Nutanix hypervisor)

Basic Qualifications:

• Bachelor's degree with a minimum of 4 years of relevant experience, Master’s degree with a minimum 2 years, Associate’s with a minimum 6 years of related experience or High School Diploma with a minimum 8 years of related experience can be used in lieu of Bachelor’s degree.

OR

• Bachelor's degree with a minimum of 8 years of relevant experience, Master’s degree with a minimum 6 years, Associate’s with a minimum 10 years of related experience or High School Diploma with a minimum 8 years of related experience can be used in lieu of Bachelor’s degree.
• Experience with the development of  PowerShell, Bash, or other scripting languages.
• Experience with MECM/SCCM
• Positive attitude and high-energy approach to IT support. Desire to learn, work, and grow in a team environment.
• Excellent oral and written communication skills, with a proactive attitude toward ensuring all stakeholders are aware of patching activities and changes.
• Familiarity with Windows server operating systems in physical and virtual environments.
• Security + or equivalent certification
• Must have US Citizenship
• Must have an active Interim Secret or Secret clearance or be able to obtain an Interim Secret clearance.

This position is open to remote work, or those who can commute to Blacksburg, VA or Ft. Meade in Maryland.

• If within 50 miles of Blacksburg, VA, must be able to report to the office 2 days per week.
• If within 50 miles of Ft. Meade, must be able to report to the office 4 days per week.
• If a remote/ telework employee, must live within the USA and be willing to travel 10% of the time.

Preferred Qualifications:

• Experience with M365 and Microsoft Intune
• Experience with PowerShell, Bash or other scripting languages.
• IT Operations-related technical certifications (A+, Net+, Sec+, MTA, etc.)

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.