Systems Administration Endpoint Engineering

About the role

Systems Administration Endpoint Engineering role supporting the MHS hybrid environment for Alpha Omega, an award‑winning solutions provider delivering mission‑enabling technology for government customers. The position provides engineering, architectural, and Tier 3/4 expertise to deliver forward‑looking, compliant solutions for application integration, security, desktop engineering, service monitoring, and mobile endpoint management within a DoD/DHA hybrid production environment.

Responsibilities

• Provide engineering, architectural, and Tier 3/4 expertise to deliver forward‑looking, compliant solutions for the MHS hybrid environment in support of standard Application Integration, Application Security, Desktop Engineering, and Service Monitoring functions.
• Develop and engineer a standard framework for centrally deploying and supporting applications and systems within the DHA hybrid production environment and provide a common system and monitoring framework used by other teams.
• Application Integration – engineer packages and test software that supports the baseline OS for virtual and physical endpoints throughout the DHA environment, including standardized administration, security, and monitoring suite.
• Application packaging, deployment support and configurations of baseline endpoint applications.
• Architect, design, and support centrally managed endpoint architecture adherent to DoD/DHA policies, tools and procedures used to maintain the DHA environment.
• Engineer, architect, design, configure and maintain Enterprise Management solutions and appropriate engineering and architecture packages and drawings as needed by the environment.
• Engineer, architect, design, support and troubleshoot endpoint management tools, infrastructure, and agents on‑premise, in the cloud and SaaS as appropriate to deliver and maintain endpoints, applications, services, hotfixes, patches and tools in support of the enterprise medical mission.
• Develop, maintain, and adjust methodologies, standards, and packages in support of forward‑looking objectives to transition from on‑premise, cloud, and SaaS use cases as appropriate.
• Develop new processes for upgrading, transitioning, and/or migrating MECM enterprise packages for use in Intune.
• Design, recommend, and develop new reporting processes in support of the MHS/DHA mission.
• Endpoint and Identity Security – validate compliance with IA controls and cybersecurity best practices for baseline applications, products, solutions, endpoints, and operating systems informed by DoDI 8510.01, RMF for DoD Information Systems.
• Perform security risk analyses and assessments of systems and applications throughout the application and system engineering life cycle with appropriate tools, guidelines, and policy, such as identifying security vulnerabilities and mitigation techniques using risk management framework process, IA controls, NIST standards, policies, procedures, configurations, Zero Trust strategy, Defense‑in‑depth, and patching.
• Engineer tools and solutions used to verify and validate IA compliance of the security posture of all systems managed by applicable teams.
• Ensure compliance with corresponding DISA STIGs.
• Deliver updates to security configurations of monitoring and compliance tools used in the labs in accordance with DoD cyber security regulations, guidelines, and industry best practices.
• Validate compliance with security controls used for new or existing applications and systems.
• Provide IA technical support and guidance as needed to ensure compliance with IA and NIST standards and other pertinent guidance from the concept stages through final solution delivery.
• Records all IA artifacts, POA&Ms, risk assessments, annual reviews, authorizations to operate, and continuous monitoring evidence within eMASS in support of RMF and Zero Trust strategy compliance.
• Desktop/Endpoint Engineering – engineer, design, develop and architect the endpoint architecture in support of deployment and consumption throughout the MHS environment.
• Maintain desktop and Operating System image libraries for the MHS, consisting of all baseline desktop image builds and approved software used throughout the organization.
• Design, build, and test configuration items such as task sequences, group policy objects, images, applications, and in‑place upgrades.
• Engineer, architect, design, and develop solutions in support of DAR requirements, multi‑purpose kiosk requirements, and User Data/Profile Management requirements.
• Consult, recommend, support, and engineer solutions to manage hardware and peripherals used and purchased by the organization.
• Test and validate desktop software, packages, configurations, and compatibility of applications for use on DHA managed endpoints.
• Ensure the DHA standardized endpoint standard is compliant with DoD, DISA, and DHA policies, regulations, guidance, and architectural requirements.
• Provide engineering, architectural, sustainment and design support to modernize existing configuration items and new cloud managed endpoint solutions with an aim to enhance end‑user experience, operating system delivery management, endpoint provisioning, application delivery and maintenance, and baseline configuration standardization.
• Mobile Engineering – develop, design, engineer, and architect solutions to standardize mobile device delivery, operating system/firmware upgrades, application validation, configuration and testing, device configuration, application and device provisioning, management, security, distribution, authentication, and end‑user experience through on‑premise, cloud, and SaaS based offerings and tools.
• Architect, engineer, and develop transition plan for support, continuity, and user experience