Sr Desktop Engineer with Security Clearance

R- Description Leidos is seeking a Sr. Desktop Engineer to support large-scale migration and operations on a large, high-profile DOD contract. The I3TS program provides enterprise-wide IT support to enable DTRA's Information Management & Technology Directorate (ITD) to consolidate, modernize, and continuously innovate the delivery of IT services and mission capabilities to DTRA's internal and external mission partners operating in CONUS and OCONUS locations. The Sr Desktop Engineer will develop and engineer the deployment of Windows endpoint services, to include physical and virtual Windows image development and maintenance, application packaging, and engineering solutions for the deployment of patches, updates, drivers, agents, and similar products for management, security, and compliance of Windows-based endpoints.Additionally, the Desktop Engineer will provide advanced support for desktop incidents escalated from the Service Desk, Tier II and III administrators, and Executive Support technicians. This role requires an individual with technical expertise administering the full lifecycle of Windows desktop platforms. The candidate will provide Windows engineering support to develop automations for the building and patching of Windows systems.This role is also responsible for interfacing with Information Assurance engineers in the development of strategies to meet Agency, DISA, and DoDNet initiatives such as endpoint management and zero-trust compliance. Primary Responsibilities Perform best practice desktop engineering support for an environment consisting of 5,000+ physical and virtual desktop endpoints, across 3 primary security enclaves, in over a dozen global locations. Perform application packaging, deployments, documentation, and release control of desktop images and applications. Provide advice, technical consultation, and Tier 3/Tier 4 support guidance by analyzing and resolving problems and evaluating means of satisfying user requirements. Perform analyses of alternatives (AoA's) where multiple potential solutions exist to evaluate solution viability and recommend the best solution based on capabilities, performance, cost, and other factors as directed. Engage in requirements gathering and validation with stakeholder groups and end users to understand and address current needs across desktop environments, as well as emerging/future trends. Research, test, and deploy security patches and vulnerability mitigation and remediation configuration changes. Provide support for the implementation, troubleshooting and maintenance of complex desktop environments for advanced users in disciplines such as scientific, R&D, Data Analytics, and similar extraordinary use cases. Perform automation tasks through scripting and testing. Effectively support a blend of operational and test desktop engineering/administration activities. Create and maintain Standard Operating Procedures (SOPs) and technical documentation. Provide follow-up reports (technical findings, feedback, and resolution steps taken) for Root Cause Analysis, After Action Reports (AAR), and process improvement initiatives. Leverage desktop management toolsets in the support of ITSM initiatives including, but not limited to, Asset Management, Change Management, and Configuration Management activities, as well as supporting the development, population, maintenance and integrity of a configuration management database (CMDB). Basic Qualifications Bachelor's degree in Science, with 8+ years' experience or Master's degree with 6+ years of experience (additional years of directly applicable experience may be accepted in lieu of a degree). Experience building, configuring, patching and maintaining Windows desktops via automation platforms. Thorough understanding and/or experience with Windows 10 and 11, including migration and upgrade strategies. Thorough knowledge of image deployment strategies including wipe-and-load, upgrade-in-place, and zero-touch deployment methodologies. Advanced experience in the architecture, implementation, tuning and maintenance of Microsoft Endpoint Configuration Manager Suite in a multi-site environment, including remote management of clients over the internet via Cloud Management Gateway. Advanced experience in managing endpoints via Intune, including co-management scenarios with Intune and MECM. Familiarity with comply-to-connect (C2C) principles and strategies for enforcing continuous endpoint device compliance. Knowledge of basic networking and network protocols (e.g. TCP/IP, routing, firewalls, SSH, VPNs) Hands-on experience with reviewing system logs and events to resolve issues. Develop and provide solutions to complex technical issues and problems that impact dev, test and production computing enclaves. Experienced with creating and managing critical system Work Instructions and Standard Operating Procedure documentation. Excellent written and oral communication skills Current IAT Level II or higher Certification such as Security + or CISSP Active DoD Top Secret Clearance w/ ability to obtain and maintain Top Secret/SCI Preferred Qualifications Experience Deploying and Scaling Azure Virtual Desktop Environments via Azure Functions or other automation platforms. Original Posting: May 5, 2025
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $104,650.00 - $189,175.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.