Infrastructure Engineer, Senior - ESM

Enterprise Solutions and Management (ESM) is a rapidly growing government contractor that provides strategic IT services that meet mission needs for Defense and Federal customers. We are hiring a Sr Infrastructure Engineer for an exciting opportunity located in Ashburn, Va.

Job Description and Responsibilities

Exciting opportunity supporting a Department of Homeland Security (DHS) U.S. Customs and Border Protection (CBP) environment consisting of approximately 75,000 business users using CBP approved Windows or Mac baseline operating systems (OS). The program delivers Engineering, Operations, Cybersecurity, and Service Management in support of a) Windows 10 and Windows 11 platforms managed using Microsoft Endpoint Management solutions, Microsoft Endpoint Configuration Manager (MECM) and Microsoft Intune in a hybrid joined Azure and on premises co-managed Active Directory; and b) MacOS environment (MacOS Monterey, Big Sur, Catalina) using the Casper Administration Management (CAM) and JAMF mobile device management system. JAMF leverages on premises Active Directory for the management of devices.

The primary responsibilities of this role include:

• Engineer, test, and deploy the ADB and SAW baseline FISMA system image, baseline images for a variety of business use cases to include but not limited to; a standard full featured image, a lite image, an ultra-lite image, and a kiosk mode image, all of which may be deployed to traditional physical hardware as well as virtualized environments such as but not limited to VMWare, Azure Virtual Desktop (AVD), or Amazon WorkSpaces (AWS)
• Administer Active Directory, Azure Active Directory. Engineer, deploy, and manage both enterprise level and Organizational Unit (OU) level Active Directory (AD) Group Policy Objects (GPO)
• Provide the full range of support required to engineer, implement, and support a locked down Zero Trust Windows and MacOS image utilizing technology concepts, controls, and configuration policies such as Desired State Configuration, Conditional Access, Windows Applocker, Intune Restricted Apps, JAMF Restricted Apps, and Whitelisting of approved applications.
• Evaluate, test, and integrate workstation changes to ensure changes will work as specified. Generate and track test problems and defects. This information shall be recorded in one or more of the CBP tracking systems; i.e. ServiceNow, Jira.
• Update and maintain the Windows OS "Software Center", the MacOS "Self Service" software catalog, the Business offerings throughout the Microsoft Store, and the service offerings provided through Microsoft Endpoint Manager and Intune. Develop and/or use existing processes and procedures to ensure all software distribution is successfully deployed to the targeted devices with no unknown impact to user productivity.
• Engineer and maintain the standard configuration of MECM distribution points (DP), Management Points (MP), Windows Server Update Services (WSUS), SQL reporting server, core site server, and secondary site servers

Required Knowledge, Skills and Abilities (KSA)

• Develop, engineer, integrate, test, distribute baseline images and Software (SW) packages
• Direct experience engineering and delivering complex IT systems, to include verifying stability, interoperability, portability, security, and scalability of system architecture

Desired KSA

• Be a positive, self-motivated, and proactive person with the ability to adapt to change and tolerate stressful situations
• Candidate must communicate effectively with team members, team lead, management, and government customer
• Must have the ability and desire to research and develop creative solutions to unique problems with minimal supervision

Minimum Training, Education, and Certifications

• 3+yrs experience
• One or more of the following: Microsoft (MS) Certified Azure Solutions Architect Expert, MS Certified CS Architect Expert, Apple Device Support certification, Apple Deployment & Management certification, and Jamf 400 Certification

• We apply the following substitution guidelines:
  • No diploma plus 2 years' experience equals a High School (HS) diploma
  • HS diploma plus 2 years' experience equals an Associate's degree
  • Associate's degree plus 2 years' experience equals a Bachelor's degree
  • Bachelor's degree plus 2 years' experience equals a Master's degree

Minimum Clearance

• CBP Background Investigation

Physical Requirements

• Required to stand, walk and sit; communicate verbally both in person and by telephone; use hands to finger, handle or feel objects or controls; reach with hands and arms. Regularly required to stoop, kneel, bend, crouch and lift up to 25 pounds. Specific vision abilities required by this job include close vision, distance vision, depth perception, color vision and the ability to adjust focus.
• Physical demands associated with this position may include extensive walking (including stairs) throughout offices and between buildings. May require use of personal or Government vehicle to drive to local and/or remote office locations.

Additional Requirements

• Other duties as assigned.

ESM provides equal employment opportunity to all individuals regardless of race, color, creed, religion, gender, age, sexual orientation, national origin or ancestry, disability, genetic information, veteran status, gender identification or any other characteristic protected by state, federal or local law.