Endpoint Migration Engineer

Title:
• Endpoint Migration Engineer

Location:
• Fully Remote

Clearance Required:
• Secret

Certification Required:
• Security+

Top Skills Required:
• PowerShell Scripting (expert level)
• MECM / SCCM
• Intune (nice to have)


Job Description:
TEKsystems is seeking an experienced Senior Endpoint Migration Engineer to join our team, who will support DOD Agencies as they migrate their endpoints to the modern environment. The Endpoint Migration Engineer will be responsible for working closely with system administrators and staff to help ensure that endpoint migrations are thoroughly tested, documented, and provide a positive experience for users and their leadership.



Primary Responsibilities
• Design and implement Microsoft Intune-based solutions that align with user needs, security requirements, and enterprise standards
• Package, deploy, and maintain applications using Intune, with a focus on automation, version control, and user experience
• Create and manage Intune policies for application deployment, device compliance, security configurations, and configuration profiles
• Ensure seamless integration with Microsoft 365 services, including Defender for Endpoint, Conditional Access, and Autopilot
• Design and deploy Windows 10 and 11 provisioning workflows using Intune, Autopilot, ESP, and dynamic provisioning techniques
• Configure and manage Windows Update for Business (WUfB) policies to ensure timely and secure OS updates
• Maintain and evolve standardized Windows 10 and 11 deployment images, leverage both cloud-native and traditional imaging strategies.
• Collaborate with infrastructure teams to transition Group Policy Objects (GPOs) to modern Intune equivalents (e.g., Settings Catalog, ADMX-backed policies)
• Work closely with the Active Directory and SCC teams to ensure SCCM readiness and alignment with broader infrastructure goals
• Implement security best practices and compliance frameworks within Intune, including endpoint protection, encryption, and data loss prevention
• Monitor and respond to security incidents related to mobile devices and endpoints, integrating with SIEM and SOC workflows
• Continuously evaluate and improve endpoint management processes, proposing innovative solutions and communicating effectively with leadership
• Develop and maintain comprehensive documentation for Intune configurations, provisioning processes, legacy GPO mappings, and SCCM coexistence strategies





• This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret)
• Because an active or interim DoD clearance is required, U.S. Citizenship is required


o Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms.  If eligible, the benefits available for this temporary role may include the following:
 Medical, dental & vision
 Critical Illness, Accident, and Hospital
 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
 Life Insurance (Voluntary Life & AD&D for the employee and dependents)
 Short and long-term disability
 Health Spending Account (HSA)
 Transportation benefits
 Employee Assistance Program
 Time Off/Leave (PTO, Vacation or Sick Leave)