Microsoft Subject Matter Expert

Systems Plus, Inc.

Washington, DC

JOB DETAILS
JOB TYPE
Full-time
SKILLS
Microsoft Product Family, Microsoft SharePoint, Microsoft Exchange Server, Secret Clearance, United States Department of Defense (DoD), Microsoft Windows Operating System, Technical Support, Security Clearance, Top Secret Clearance, Product Support, Authentication, Computer Workstations, Customer Escalations, Customer Support/Service, Desktop Virtualization, Hardware Administration, Microsoft Windows NT Group Policy, Security Information and Event Management (SIEM), Software Patches, Telemetry,
QUALIFICATIONS
  • Eight (8) years of experience in Information Technology, Endpoint Engineering, or Cybersecurity.
  • Six (6) years of experience performing engineering (not help desk) functions in enterprise environments.
  • Bachelor’s degree in Information Technology, Cybersecurity, or a related field (or equivalent experience). Formal education requirements may be waived based on relevant professional experience.
  • Experience working under formal change control, audit, and security governance processes.
  • Experience building and maintaining Windows and macOS workstation images.
  • Experience with image automation, validation, rollback, and version control.
  • Experience integrating images with VDI, EDR, authentication, and logging agents.
  • Hands-on experience using Ivanti and/or KACE for operating system and application patching.
  • Experience managing configuration drift, remediation workflows, and reporting.
  • Experience validating patches post-deployment and supporting rollback.
  • Experience with Microsoft Intune and Windows Autopilot for provisioning and compliance enforcement.
  • Experience implementing passwordless authentication and hardware-backed credentials, including YubiKey, CAC, or software keys.
  • Experience configuring endpoint logging, including Windows Event Logs and macOS Unified Logs.
  • Experience forwarding and validating logs into SIEM/EDR platforms such as MS Sentinel, not limited to MS Sentinel.
  • Experience supporting forensic collection and audit readiness.
  • Required: Top Secret (TS) security clearance
RESPONSIBILITIES
  • Lead engineering, administration, and continuous improvement of Microsoft endpoint
    management capabilities, including Microsoft Intune, Windows Autopilot, Group Policy Objects, device compliance, configuration profiles, security policies, and conditional access requirements.
  • Design, maintain, and secure Windows workstation images, endpoint baselines, patching processes, and device lifecycle workflows supporting both on-site and remote/VDI users.
  • Engineer and maintain operating system and application patching, version control, and lifecycle management using approved mechanisms such as Microsoft Intune, Group Policy Objects, Ivanti, KACE, or a company application store.
  • Support Microsoft Intune registration and Windows Autopilot for desktops, laptops, and Agency-issued mobile devices, including passwordless authentication and hardware-backed credentials for privileged and sensitive accounts.
  • Engineer and maintain endpoint logging, telemetry, auditing, and monitoring capabilities, including Windows Event Logs and forwarding to SIEM/EDR platforms according to documented schemas.
  • Support escalated Service Desk engineering issues involving Windows imaging, baseline remediation, enrollment, patching, authentication, endpoint compliance, telemetry engineering, and VDI/remote access.
  • Develop technical documentation, operational playbooks, user-facing runbooks, knowledge- transfer materials, and versioned knowledge-base content supporting Service Desk and IRM operations.
  • Coordinate technical implementations with the COR, Cybersecurity leadership, Service Desk leads, IAM, SOC, and IRM teams in accordance with Agency change-control and approval processes.
LOCATION
Washington, DC
POSTED
1 day ago

This role leads engineering and administration of Microsoft endpoint management, primarily Intune, Windows Autopilot, Group Policy, and conditional access, covering everything from workstation imaging and patching to device lifecycle for both on-site and remote/VDI users. It includes engineering endpoint telemetry and logging into SIEM/EDR platforms, supporting passwordless and hardware-backed authentication for privileged accounts, and handling escalated Service Desk issues around imaging, enrollment, and compliance. The role also produces documentation and runbooks for Service Desk and IRM teams, and coordinates implementations across Cybersecurity, IAM, SOC, and IRM stakeholders under formal change control.

About the Company

S

Systems Plus, Inc.

Meet Systems Plus

Systems Plus, as a company, is a testament to its people’s hard work, dedication, and commitment to success. That commitment to success is seen by conducting business based on our Core Principles:  
 
AGILITY: With over 25 years of experience in the commercial, Federal, and Defense market, Systems Plus has proven its ability to adjust, withstand, and prosper in all economic climates. We embrace change by driving digital transformation and flexible processes for rapid-decision making.  
  
CURIOSITY: Systems Plus utilizes exploration and innovation to excel at creative problem solving, maximize creative thinking, and increase collaboration.  
 
TRUST: Systems Plus has become one of the most reputable businesses supporting the Federal market-space, consistently earning excellent performance references from its customers. We gain the trust of our clients by encompassing a deep understanding of their mission, unwavering commitment to excellence and quality, and practicing good judgement and expertise.  
  
PEOPLE: Systems Plus employs and retains highly qualified professionals because of its unique culture that is as much family oriented as it is encouraging each team member to develop their professional interests to maximize competencies, motivation, productivity, and quality solutions.  
  
VISION: Utilizing a wide variety of Contracting Vehicles and engagement strategies, and offering a diverse portfolio of services, Systems Plus is able to support their customers on a global scale and deliver results that meet their missions.

Our Philosophy

At Systems Plus, we’ve built more than a business — we’ve built a culture where people are inspired to do their best work. It’s a place where careers thrive, talent is recognized and big ideas are brought to life. Our success is powered by the innovation, passion and dedication of our people, and that’s what makes us different. If you’re ready to grow, be supported and take your career to the next level.

INDUSTRY
Government and Military