Cloud Service Desk Engineer

DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com

DMI is seeking a Cloud Service Desk Engineer to provide engineering-level support for cloud-connected endpoint and identity services at a federal agency client. In this role, you will handle complex and escalated engineering tickets related to cloud identity, conditional access, device compliance, and remote access — bridging Microsoft cloud services with enterprise endpoint management.

• →Engineer and maintain conditional access policies and device compliance requirements in Microsoft Entra ID and Intune, ensuring cloud-connected endpoints meet security posture requirements before granting network access
• →Support Microsoft Intune enrollment workflows for cloud-managed devices, including configuration profile deployment and compliance enforcement
• →Implement and maintain passwordless authentication and hardware-backed credentials for privileged and sensitive accounts across cloud-connected environments
• →Support VDI connectivity engineering, ensuring remote users on macOS and Windows platforms can securely access the virtual desktop environment
• →Maintain device enrollment and identity association workflows, ensuring accurate asset inventory and user-to-device linkage across cloud and hybrid environments
• →Configure and maintain logging and telemetry for cloud identity and access events; ensure audit trails are forwarded to enterprise SIEM platforms
• →Resolve complex and escalated engineering tickets related to cloud services, identity, and access; produce runbooks and documentation for recurring issue patterns

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. US citizenship may be required for some positions.

• Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred

• Education requirements may be waived based on professional experience, at the government’s discretion

• 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity

• 6+ years performing engineering (not help desk) functions in enterprise environments
• Hands-on experience with Microsoft Entra ID and Intune for cloud identity and device compliance management
• Experience engineering conditional access policies, role-based access, and identity-aware network access controls
• Experience supporting VDI environments and remote access connectivity for Windows and macOS users
• Experience implementing passwordless authentication and hardware-backed credentials in an enterprise environment
• Experience working under formal change control, audit, and security governance processes

• Microsoft certifications in identity, endpoint management, or cloud administration
• Experience with Microsoft Sentinel for cloud identity and access telemetry
• Familiarity with hybrid identity environments integrating on-premises Active Directory with Entra ID