Endpoint Security Specialist

Core Responsibilities

• Manage and secure Windows and Macintosh laptop endpoints, including system configuration, baseline enforcement, patch deployment, and lifecycle management
• Implement and maintain Mobile Device Management (MDM) solutions to enforce endpoint security policies and compliance controls across macOS and Windows environments
• Administer and secure Macintosh devices using JAMF Pro, including device enrollment, configuration profiles, software distribution, and compliance monitoring
• Utilize enterprise patch management tools, including BigFix and related technologies, to ensure timely deployment of operating system and third-party application updates
• Oversee endpoint configuration standards and ensure alignment with federal security requirements and organizational hardening guidelines
• Monitor endpoint health, patch compliance, and vulnerability remediation through reporting dashboards and security tools
• Collaborate directly with cybersecurity teams to ensure endpoint security controls, EDR tools, and patching strategies align with NTIA’s broader security posture and compliance framework
• Troubleshoot and resolve issues related to device enrollment, patch failures, configuration drift, and security policy enforcement
• Maintain documentation, SOPs, and reporting artifacts to support audits, compliance reviews, and operational transparency
• Provide professional and timely support to NTIA users while maintaining secure and reliable endpoint operations

Minimum Qualifications

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent combination of education and relevant experience
• Minimum of 5 years of IT or endpoint administration experience
• U.S. Citizenship required with an active Secret clearance
• Foundational experience managing macOS and Windows devices in an enterprise or federal environment
• Familiarity with BigFix and macOS MDM frameworks such as JAMF and Intune
• Knowledge of scripting languages such as PowerShell or Bash for automation and remediation tasks
• Understanding of system patching, software distribution, and compliance reporting
• Strong communication skills, attention to detail, and commitment to maintaining secure and reliable endpoint operations

Preferred Qualifications

• CompTIA certifications such as A+, Network+, Security+, or AZ-900
• Microsoft or IBM certifications related to BigFix administration
• Apple Certified Support Professional (ACSP) or equivalent macOS certification
• Experience managing Apple Business Manager and automated MDM enrollment workflows
• Familiarity with Active Directory, Azure AD, Microsoft Intune, and identity management for cross-platform devices
• Experience with endpoint detection and response (EDR) tools and vulnerability management practices
• Experience working within a federal or enterprise IT environment with stringent security compliance requirements