Senior Systems Admin (Microsoft Endpoint Management)

Job Family:

Systems Engineering

Travel Required:

Up to 10%

Clearance Required:

Active Top Secret (TS)

We are seeking an experienced Senior Systems Administrator – Microsoft Endpoint Management to lead the administration, optimization, and security of enterprise endpoint environments within secure federal programs. This role will manage Microsoft Intune/Endpoint Manager, configuration baselines, device compliance, and application deployment for mission-critical federal user communities.

The ideal candidate brings deep experience with Microsoft 365, Windows client management, Azure cloud integrations, and secure device lifecycle operations in compliance-driven environments.

What You Will Do

• Administer and optimize Microsoft Intune / Microsoft Endpoint Manager (MEM) for Windows, mobile, and specialty devices across federal environments.

• Manage device provisioning, enrollment, configuration profiles, compliance policies, conditional access, and security baselines.

• Deploy and maintain applications, patches, updates, and OS images using Intune, ConfigMgr (SCCM), Autopatch, and Autopilot.

• Oversee Windows workstation standards, hardening policies, and Zero‑Trust‑aligned endpoint security controls.

• Collaborate with cloud, identity, and security teams to integrate Azure AD/Entra ID, MFA, and modern authentication policies.

• Troubleshoot escalated endpoint issues related to performance, compliance, identity, connectivity, and application delivery.

• Ensure lifecycle management of endpoint devices, including monitoring, reporting, inventory management, and vulnerability mitigation.

• Produce and maintain documentation, SOPs, configuration baselines, and compliance artifacts supporting audits, ATO, or RMF processes.

• Support modernization initiatives such as cloud‑based endpoint management, automation, and infrastructure improvements.

• Provide senior‑level guidance and mentorship to junior system administrators and support teams.

What You Will Need

• Bachelor's Degree OR additional FOUR (4) years' experience in lieu of Degree.

• Citizenship

• An ACTIVE and MAINTAINED "TOP SECRET" Federal or DoD security clearance and ability to obtain SCI.

• Minimum of SEVEN (7) years of experience in systems administration, endpoint management, or enterprise IT operations

• Hands-on expertise with Microsoft Intune/Endpoint Manager, Windows 10/11, and Microsoft 365 environments

• Experience supporting secure or compliance-driven environments (Federal Civilian, DoD, IC, or similar)

• Familiarity with Azure AD/Entra ID, device compliance, conditional access, and modern authentication

• Strong troubleshooting skills across identity, device, application, and policy layers

• Excellent communication, documentation, and stakeholder engagement skills

Nice to Have Certifications

• MD‑102: Endpoint Administrator

• MS‑102: Microsoft 365 Administrator

• AZ‑104: Azure Administrator

• Security+

Desired Additional Skills

• Experience with SCCM/ConfigMgr, Co‑Management, and Autopilot provisioning

• PowerShell scripting for automation and reporting

• Familiarity with federal security frameworks (NIST 800‑53, STIGs, RMF)

• Knowledge of vulnerability management and endpoint hardening best practices

• Experience with device analytics, telemetry, and monitoring (Log Analytics, Defender, Sentinel)

• Understanding of Zero Trust endpoint posture and compliance enforcement

The annual salary range for this position is $130,000.00-$216,000.00. Compensation decisions depend on a wide range of factors, including but not limited to skill sets, experience and training, security clearances, licensure and certifications, and other business and organizational needs.

What We Offer:

Guidehouse offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

Benefits include:

• Medical, Rx, Den