Description
Leidos is seeking a highly skilled Senior Unified Endpoint Management (UEM) Engineer to support the Defense Enclave Services (DES) program—an enterprise-scale digital modernization initiative for the Defense Information Systems Agency (DISA) and Department of Defense (DoD) Fourth Estate Agencies.
In this role, you will lead the design, implementation, and optimization of modern endpoint management solutions, with a primary focus on Microsoft Intune and cloud-native device management. You will play a key role in migrating legacy environments (MECM and on-premises Active Directory) to Azure AD–joined, Intune-managed endpoints, helping drive secure, scalable, and user-centric solutions across the enterprise.
This position requires both deep technical expertise and the ability to collaborate across engineering, security, and operations teams to deliver resilient and compliant endpoint solutions.
Primary Responsibilities
-
Lead the design, architecture, and deployment of Microsoft Intune solutions aligned with enterprise security, compliance, and user experience requirements
-
Drive endpoint modernization efforts, including migration from MECM and traditional AD-joined devices to Azure AD–joined and Intune-managed environments
-
Develop and manage Intune policies and configurations, including compliance policies, configuration profiles, and application deployment strategies
-
Package, deploy, and lifecycle-manage applications in Intune, emphasizing automation, version control, and end-user experience
-
Architect and implement Windows 10/11 provisioning and deployment solutions using Intune, Autopilot, Enrollment Status Page (ESP), and modern provisioning techniques
-
Configure and optimize Windows Update for Business (WUfB) to ensure secure, reliable, and timely OS patching
-
Collaborate with infrastructure and identity teams to translate and modernize Group Policy Objects (GPOs) into Intune-based controls (Settings Catalog, ADMX-backed policies)
-
Partner with Active Directory and MECM/SCCM teams to ensure coexistence strategies and migration readiness
-
Integrate Intune with the broader Microsoft 365 ecosystem, including Defender for Endpoint, Conditional Access, and Zero Trust security models
-
Implement and enforce endpoint security best practices, including encryption, endpoint protection, compliance baselines, and data loss prevention
-
Support security operations by monitoring endpoint-related incidents and integrating telemetry with SIEM/SOC workflows
-
Identify opportunities to optimize endpoint management processes, recommending improvements and driving adoption of modern management capabilities
-
Develop and maintain comprehensive technical documentation, including architecture diagrams, configuration standards, and migration strategies
Required Qualifications
-
Bachelor’s degree with 4+ years of relevant experience, or Master’s degree with 2+ years of experience (additional experience may be considered in lieu of degree)
-
Active DoD Secret clearance
-
Proven experience implementing and administering Microsoft Intune, including endpoint enrollment, configuration, and migration.
-
Hands-on experience packaging, testing, and deploying Windows applications using Microsoft Intune.
-
Strong proficiency in PowerShell scripting to automate administrative tasks, streamline deployments, and troubleshoot endpoint issues.
-
Experience collaborating directly with customers, end users, and stakeholders to gather requirements, provide project updates, and deliver technical solutions.
-
Excellent communication, organizational, analytical, and problem-solving skills with the ability to manage multiple priorities and meet deadlines in a fast-paced environment.
-
Working knowledge of Atlassian tools, including Jira and Confluence, for project tracking, documentation, and team collaboration.
-
Current DoD 8570 IAT Level II certification (e.g., Security+ CE, CISSP)
Desired Qualifications
-
Microsoft certifications such as Microsoft Endpoint Administrator Associate or Microsoft 365 Certified: Endpoint Administrator Expert
-
Experience with large-scale enterprise migrations to cloud-native endpoint management
-
Familiarity with Zero Trust architecture and modern identity/security frameworks
-
Experience integrating endpoint management with SIEM/SOC platforms
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.
July 17, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range $87,100.00 - $157,450.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected].
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
