Platform Engineering Lead

Description

The company is a global technology and professional services firm serving U.S. federal agencies, defense and the intelligence community, with about 26,000 staff in more than 50 countries. Its work covers AI, cloud, cyber and software development.

This role leads the team that engineers end-user computing for a federal customer. The team covers desktop and mobile operating systems, image management, endpoint protection, software distribution and unified endpoint management, across thousands of devices and applications.

You will set the team's technical direction, plan its platform roadmap, and work with vendors and stakeholders to keep services reliable, secure and scalable. The work focuses on modernization, automation, image lifecycle and endpoint protection, with the goal of better performance, fewer incidents and a better user experience.

The team works with security, engineering, OEM vendors, application owners and customer stakeholders to solve complex problems, plan upgrades and stay compliant.

Responsibilities

• Lead the end-user platform engineering team and guide its modernization, automation, secure baseline and lifecycle work.
• Build and maintain desktop and mobile OS baselines, including Group Policies, Modern Policies, scripts and technical documentation.
• Set the OS, application, encryption, security and image requirements.
• Build and maintain Core Images and profiles for several device models and OS versions.
• Run OS lifecycle work, including quarterly updates, testing and validation.
• Script, package and test Windows and macOS applications, and manage deployment tools and self-service portals.
• Support offline deployment when it is needed.
• Engineer, deploy and troubleshoot endpoint protection agents such as McAfee and Carbon Black, and make sure their central consoles and modules work properly.
• Support SOC workflows, log collection and malware containment.
• Write test and release plans for image validation, coordinate customer application testing, and manage image approval.
• Maintain offline OS media and support remote build processes.
• Give Tier 3 support for escalated desktop and mobile issues, and troubleshoot OS, application and patching problems with customer teams.

Requirements

• Hold a bachelor's degree in Computer Science or a related field, or have 4 additional years of applicable experience in place of it.
• Have 10+ years of related experience.
• Hold ITIL 4 or ITIL 5 Foundation certification, which the customer requires before a candidate can be considered.
• Have 5+ years of varied IT experience with Microsoft Intune, Windows 11 and Modern Policies, virtual desktop environments, MS Defender for Endpoint, Microsoft 365 applications, CrowdStrike EDR, end-user device engineering and support, Windows Server, desktop apps and Wintel hardware, cloud technologies and SaaS, and end-user platform management tools.
• Be strong in OS engineering, image engineering, Group and Modern Policies, secure baselines including DISA STIGs, and endpoint protection.
• Be skilled in endpoint privilege management.
• Have strong scripting and automation skills, with PowerShell preferred.
• Preferred: experience in a managed services IT environment.
• Highly desired: previous experience supporting large U.S. federal government customers.

Conditions

This is a regular, full-time onsite role at the customer site in Arlington, VA, with 40 scheduled hours a week.

Travel is less than 10%.

U.S. citizenship is required.

No security clearance is needed now or to be obtained, but a public trust background investigation at BI Full 6C (T4) is required.

The likely salary range is $140,821 - $190,523. Pay is set by experience, geographic location and possibly contract terms, and may fall outside this range. It is not a guarantee.

Hiring includes an identity verification check using biometrics, and virtual interviews require you to be on camera.

The company is an equal opportunity employer and welcomes individuals with disabilities and protected veterans.

Benefits

• 401(k) with company match, with pre-tax and post-tax contributions up to the IRS annual limits.
• Medical plans, some with Health Savings Accounts, plus dental and vision plans.
• Comprehensive health and wellness packages.
• Paid vacation, sick and personal time, holidays, parental, military, bereavement and jury duty leave.
• Full flex work weeks where possible.
• Short and long-term disability, life, accidental death and dismemberment, personal accident, critical illness, and business travel and accident insurance, provided or available.
• Professional growth, including paid education and certifications.
• An internal mobility team that helps you manage your career.
• Work with current technology.