Manager, IT Engineer - Endpoint/MDM

As the Endpoint/MDM Engineer, you will play a key role in managing and securing all endpoints and mobile devices across the BCG Federal organization in a Microsoft GCC High environment. You will work with platforms like Microsoft Intune, Jamf, and Tanium to ensure that Windows laptops, MacBooks, and mobile devices are secure, up-to-date, and functioning efficiently. This role includes creating and managing the laptop images for both Windows and Mac devices, ensuring consistency across deployments. Additionally, you will collaborate with the IT Service team to maintain high standards of image quality and end user satisfaction.

Endpoint Management:

• Build, maintain, and update the laptop images for Windows and MacBook devices, ensuring they are secure, up-to-date, and optimized for performance.

• Manage the configuration and deployment of Microsoft Intune, Tanium, and Jamf for endpoint devices.

• Work closely with the Cloud Engineer to maintain the Azure VDI image to ensure it is secure, up-to-date, and optimized for performance.

• Implement and maintain endpoint security policies to protect the organization's IT infrastructure.

• Handle software packaging, deployment, and patch management to keep devices secure and up to date.

• Conduct regular maintenance and optimization of endpoint systems, identifying opportunities for improvement.

• Maintain the device catalog and assess new laptop models and accessories for performance and quality.

Mobile Device Management (MDM):

• Manage and support iOS devices using Microsoft Intune, including administering Apple Business Manager (ABM) for DEP/VPP. Experience with Android Enterprise is preferred but not required.

• Develop and maintain mobile security policies and ensure seamless integration with the organization's broader IT infrastructure.

• Oversee the enrollment of new mobile devices, ensuring they are properly configured, secured, and tracked throughout their lifecycle.

• Serve as an escalation point for user troubleshooting with mobile devices, providing advanced support and resolving issues.

• Stay up to date with the latest developments in mobile device management, security best practices, and emerging technologies.
  
  US Citizenship, with ability to obtain and maintain a secret security clearance is required. Dual citizens may be subject to additional eligibility requirements.

• Strong knowledge and hands-on experience with Microsoft Intune, Jamf, and Mobile Device Management (MDM) platforms.

• Proficiency in scripting for device management, using tools like PowerShell and VBScript.

• Solid understanding of network security technologies such as Zscaler and DNS, and their integration with endpoint management.

• Excellent troubleshooting skills for resolving issues with both endpoint and mobile devices.

• Clear and effective communication, with the ability to work independently and as part of a team.

• Strong ability to manage multiple tasks in a fast-paced environment, ensuring projects are completed on time.

• Skilled in documenting procedures, configurations, and policies for future reference and compliance purposes.

Education:

• Bachelor's degree in computer science, Information Technology, Software Engineering, or a related field preferred.

Experience:

• 5+ years of IT experience with a focus on Endpoint Management and Security, preferably in a Microsoft GCC High environment.

• 2+ years of experience with MDM tools like Microsoft Intune and Jamf, including Apple Business Manager. Android Enterprise a plus.

• Hands-on experience with scripting for endpoint management.

Certifications (Preferred):

• Microsoft Certified: Intune and Azure certifications are highly desirable.

Security Requirements:

• US Citizenship and ability to obtain and maintain a Secret clearance.
  
  #LI-JS3

• In Washington D.C. the base salary is between $115,000- $140,800 (USD); placement within this range will vary based on experience and skill level
• In other locations, competitive pay is commensurate with the role and geography
• Annual discretionary performance bonus between 0-16%
• 5% Profit Sharing Retirement Fund (PSRF) contribution, increasing to 10% after two years of service. Contributions are vested immediately and there is no waiting period

• Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children
• Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs
• Dental coverage, including up to $5,000 in orthodontia benefits
• Vision insurance with coverage for both glasses and contact lenses annually
• Reimbursement for gym memberships and other fitness activities
• Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan
• Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement
• Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month)
• Paid sick time on an as needed basis