Microsoft Systems SME
About DMI
DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com
About the Opportunity
DMI is seeking a Microsoft Systems SME to serve as the subject matter expert for Windows endpoint engineering at a federal agency client. In this role, you will lead the design, configuration, and lifecycle management of Windows workstations and Microsoft endpoint management services, ensuring secure, compliant, and well-documented deployments across the enterprise environment.
Duties and Responsibilities:
Engineer and maintain secure Windows workstation images incorporating approved security baselines, authentication agents, and VDI/remote access capabilities
Configure and maintain Microsoft Intune device compliance policies, configuration profiles, and conditional access requirements based on user role and device posture
Manage Windows Autopilot for automated device provisioning, registration, and lifecycle management
Implement and maintain OS and application patch management using Ivanti, KACE, and Intune/GPO-based orchestration; validate patches post-deployment and support rollback
Implement passwordless authentication and hardware-backed credentials, including YubiKey, CAC, and software keys for privileged and sensitive accounts
Maintain Windows device enrollment workflows and accurate asset inventory, including provisioning, reassignment, decommissioning, and secure wipe
Produce and maintain engineering documentation, runbooks, and change records for all Windows endpoint configurations
Qualifications
Education and Years of Experience:
Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred
Education requirements may be waived based on professional experience, at the government’s discretion
8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity
6+ years performing engineering (not help desk) functions in enterprise environments
Expert-level proficiency with Microsoft Intune, including compliance policies, configuration profiles, and conditional access
Hands-on experience with Windows Autopilot for device provisioning and lifecycle management
Experience with Ivanti and/or KACE for OS and application patch management
Experience with Group Policy Objects (GPO) for Windows endpoint configuration and security enforcement
Experience implementing passwordless authentication and hardware-backed credentials (YubiKey, CAC, software keys)
Experience working under formal change control, audit, and security governance processes
Required Skills & Certifications:
Microsoft certifications in endpoint management or cloud administration (e.g., MD-102, MS-102)
Experience with Microsoft Sentinel or equivalent SIEM for Windows endpoint telemetry ^
Familiarity with hybrid identity environments integrating on-premises Active Directory with Entra ID
Clearance Requirements: Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance.
Active Top Secret (TS) clearance required.
Citizenship Status Required: Must be a U.S. Citizen
Physical Requirements: None required for this position.
Location: Remote, US
#LI-MS3
Working at DMI
DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:
Do What’s Right – We lead with honesty and integrity.
Own the Outcome – We take responsibility and deliver.
Deliver for Our Customers – We are relentless about delivering value.
Think Bold, Act Smart – We innovate with purpose.
Win Together – We collaborate and celebrate our success.
These values aren’t just ideals—they show up in how we support every part of your well-being:
Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
Recognition – Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.
DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.
***************** No Agencies Please *****************
Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.
DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com
About the Opportunity
DMI is seeking a Microsoft Systems SME to serve as the subject matter expert for Windows endpoint engineering at a federal agency client. In this role, you will lead the design, configuration, and lifecycle management of Windows workstations and Microsoft endpoint management services, ensuring secure, compliant, and well-documented deployments across the enterprise environment.
Duties and Responsibilities:
Engineer and maintain secure Windows workstation images incorporating approved security baselines, authentication agents, and VDI/remote access capabilities
Configure and maintain Microsoft Intune device compliance policies, configuration profiles, and conditional access requirements based on user role and device posture
Manage Windows Autopilot for automated device provisioning, registration, and lifecycle management
Implement and maintain OS and application patch management using Ivanti, KACE, and Intune/GPO-based orchestration; validate patches post-deployment and support rollback
Implement passwordless authentication and hardware-backed credentials, including YubiKey, CAC, and software keys for privileged and sensitive accounts
Maintain Windows device enrollment workflows and accurate asset inventory, including provisioning, reassignment, decommissioning, and secure wipe
Produce and maintain engineering documentation, runbooks, and change records for all Windows endpoint configurations
Qualifications
Education and Years of Experience:
Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred
Education requirements may be waived based on professional experience, at the government’s discretion
8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity
6+ years performing engineering (not help desk) functions in enterprise environments
Expert-level proficiency with Microsoft Intune, including compliance policies, configuration profiles, and conditional access
Hands-on experience with Windows Autopilot for device provisioning and lifecycle management
Experience with Ivanti and/or KACE for OS and application patch management
Experience with Group Policy Objects (GPO) for Windows endpoint configuration and security enforcement
Experience implementing passwordless authentication and hardware-backed credentials (YubiKey, CAC, software keys)
Experience working under formal change control, audit, and security governance processes
Required Skills & Certifications:
Microsoft certifications in endpoint management or cloud administration (e.g., MD-102, MS-102)
Experience with Microsoft Sentinel or equivalent SIEM for Windows endpoint telemetry ^
Familiarity with hybrid identity environments integrating on-premises Active Directory with Entra ID
Clearance Requirements: Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance.
Active Top Secret (TS) clearance required.
Citizenship Status Required: Must be a U.S. Citizen
Physical Requirements: None required for this position.
Location: Remote, US
#LI-MS3
Working at DMI
DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together:
Do What’s Right – We lead with honesty and integrity.
Own the Outcome – We take responsibility and deliver.
Deliver for Our Customers – We are relentless about delivering value.
Think Bold, Act Smart – We innovate with purpose.
Win Together – We collaborate and celebrate our success.
These values aren’t just ideals—they show up in how we support every part of your well-being:
Convenience/Concierge – Virtual health visits, commuter perks, pet insurance, and entertainment discounts that make life easier.
Development – Annual performance reviews, tuition assistance, and internal career growth opportunities to help you thrive.
Financial – Generous 401(k) matches, life and disability insurance, and financial wellness tools to support your future.
Recognition – Annual awards, service anniversaries, referral bonuses, and peer-to-peer shoutouts that spotlight your achievements.
Wellness – Healthcare coverage, wellness programs, flu shots, and biometric screenings to support your health.
DMI values employees for their talents and contributions, and we take pride in helping our customers achieve their goals. Because when we live our values, we all win together.
***************** No Agencies Please *****************
Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.