ENDPOINT ENGINEERING LEAD

Empower AI is AI for government. Empower AI gives federal agency leaders the tools to elevate the potential of their workforce with a direct path for meaningful transformation. Headquartered in Reston, Va., Empower AI leverages three decades of experience solving complex challenges in Health, Defense, and Civilian missions. Our proven Empower AI Platform® provides a practical, sustainable path for clients to achieve transformation that is true to who they are, what they do, how they work, with the resources they have. The result is a government workforce that is exponentially more creative and productive. For more information, visit www.Empower.ai.

Empower AI is proud to be recognized as a 2024 Military Friendly Employer by Viqtory, the publisher of G.I. Jobs. This designation reflects the company’s commitment to hiring and supporting active-duty and veteran employees.

Empower AI is seeking an Endpoint Engineering Lead to lead the Enterprise Endpoint Infrastructure Management (desktop engineering) team for a Department of War agency, responsible for thousands of endpoints across Pre-Production, NIPRNet, SIPRNet, and JWICS enclaves. The Lead owns the technical strategy and daily direction of MECM/SCCM engineers, application packaging, imaging, patch, and STIG/compliance engineers; is accountable for CAT I/II/III patch compliance, hardened image compliance, and Group Policy configuration control; leads the Digital Twin evaluation and implementation so no significant change reaches production untested; and serves as the Tier III/IV engineering authority for enterprise-wide endpoint incidents. This role partners with the Tier II/Deskside Lead, cybersecurity, and RMF teams. This is a salaried, FLSA-exempt position in which you will independently analyze situations, determine the appropriate course of action, and exercise discretion and independent judgment on matters of significance to the program and its customers.

• Lead and direct the endpoint engineering team (MECM/SCCM engineers, application packaging, imaging/deployment, patch management, STIG/compliance), including work prioritization, technical review, mentoring, and coordination with the Tier II/Deskside Lead and Service Desk.
• Own the endpoint engineering roadmap and standards: endpoint management platform architecture, hardened image strategy, Group Policy and configuration baseline governance, automation and provisioning design, and pre-production/Digital Twin test-before-deploy practice.
• Author the Digital Twin Evaluation and Implementation Plan (within 120 days of award) and lead its phased implementation, cost-benefit analysis, and adoption as the mandatory validation gate for significant network and system changes.
• Be accountable for CAT I/II/III patch compliance, image STIG compliance, and time-to-remediate metrics reported to the Customer Support Metrics Dashboard, and lead endpoint After-Action Reviews and Root Cause Analyses.
• Lead the engineering design, implementation, and lifecycle of the enterprise endpoint infrastructure: hardened image pipelines, automated provisioning, endpoint management platform architecture (MECM/SCCM, Intune), configuration baselines, and VDI integration across all enclaves.
• Lead the evaluation, cost-benefit analysis, and phased implementation of the Digital Twin capability for network and system modeling; author the Digital Twin Evaluation and Implementation Plan; and establish the practice that every significant change is tested in the digital replica before deployment.
• Lead engineering for AI, automation, and analytics initiatives approved by the Government, including predictive analytics on service data, intelligent automation across support tiers, and integrations with the ITSM platform, and deliver Proof of Concept Reports documenting feasibility, risks, and benefits.
• Conduct market research and produce Market Research Reports and Rough Orders of Magnitude (ROMs) for emerging technologies and proposed solutions to support Government planning and IT Capability Request analysis.

• CISSP, CASP+ CE, or GCED; Microsoft 365 Certified: Administrator Expert; VMware VCP/VCAP; AWS or Azure architect certification.
• Experience supporting Department of War (DoW), DoD, or Intelligence Community environments across NIPRNet, SIPRNet, and JWICS enclaves.
• Experience applying AI/ML, RPA, or AIOps to IT service management and endpoint operations, including ServiceNow integrations.
• Familiarity with DoD Zero Trust Strategy and Reference Architecture, DoDAF 2.02, DoD ICAM Strategy, and Technology Business Management (TBM).
• ITIL 4 Foundation or Managing Professional; PMP.
• Experience supporting IT Capability Request (ITCR) analysis and governance briefings.

All hiring and promotion decisions at Empower AI are based on merit to bring the best talent available to contribute to our firm’s overall success. It is the policy of Empower AI not to discriminate against any applicant for employment, or employee because of age, color, sex, disability, national origin, race, religion, or veteran status. Empower AI is a VEVRAA Federal Contractor.