Back to jobs
DMI logo
Administrative

Microsoft Systems SME

DMI
Location

United States · Remote

Type

Full-time

Level

Senior

Posted

1 hour ago

Apply link not verified recently — we re-check every 2 hours

$78k – $85k

Tailor my resume

Before you apply

Job source
Himalayas
Applying on
himalayas.app
Workplace
Fully remote
US state
Nationwide remote
Category
Administrative
Link last checked
Not checked yet
Posted
1 hour ago
Closes
11/18/2026
  1. 1. Tailor your resume to this posting — it takes about a minute and noticeably improves your match score.
  2. 2. Click One-Click Apply. We open the posting directly on himalayas.app in a new tab — Remote Me never charges for or intermediates an application.
  3. 3. Create or sign in to the employer's applicant account, upload your resume, and submit their form.
  4. 4. Come back and hit Save so this role stays in your dashboard — we'll notify you if the posting closes or the link breaks.

About the role

About DMI DMI is a leading provider of digital services and technology solutions, headquartered in Tysons Corner, VA. With a focus on end-to-end managed IT services, including managed mobility, cloud, cybersecurity, network operations, and application development, DMI supports public sector agencies and commercial enterprises around the globe. Recognized as a Top Workplace, DMI is committed to delivering secure, efficient, and cost-effective solutions that drive measurable results. Learn more at www.dminc.com About the Opportunity DMI is seeking a Microsoft Systems SME to serve as the subject matter expert for Windows endpoint engineering at a federal agency client. In this role, you will lead the design, configuration, and lifecycle management of Windows workstations and Microsoft endpoint management services, ensuring secure, compliant, and well-documented deployments across the enterprise environment. Duties and Responsibilities: Engineer and maintain secure Windows workstation images incorporating approved security baselines, authentication agents, and VDI/remote access capabilities Configure and maintain Microsoft Intune device compliance policies, configuration profiles, and conditional access requirements based on user role and device posture Manage Windows Autopilot for automated device provisioning, registration, and lifecycle management Implement and maintain OS and application patch management using Ivanti, KACE, and Intune/GPO-based orchestration; validate patches post-deployment and support rollback Implement passwordless authentication and hardware-backed credentials, including YubiKey, CAC, and software keys for privileged and sensitive accounts Maintain Windows device enrollment workflows and accurate asset inventory, including provisioning, reassignment, decommissioning, and secure wipe Produce and maintain engineering documentation, runbooks, and change records for all Windows endpoint configurations Qualifications Education and Years of Experience: Bachelor's degree in Information Technology, Cybersecurity, or a related field preferred Education requirements may be waived based on professional experience, at the government’s discretion 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity 6+ years performing engineering (not help desk) functions in enterprise environments Expert-level proficiency with Microsoft Intune, including compliance policies, configuration profiles, and conditional access Hands-on experience with Windows Autopilot for device provisioning and lifecycle management Experience with Ivanti and/or KACE for OS and application patch management Experience with Group Policy Objects (GPO) for Windows endpoint configuration and security enforcement Experience implementing passwordless authentication and hardware-backed credentials (YubiKey, CAC, software keys) Experience working under formal change control, audit, and security governance processes Required Skills & Certifications: Microsoft certifications in endpoint management or cloud administration (e.g., MD-102, MS-102) Experience with Microsoft Sentinel or equivalent SIEM for Windows endpoint telemetry ^ Familiarity with hybrid identity environments integrating on-premises Active Directory with Entra ID Clearance Requirements: Must possess or be eligible to obtain and complete a government security screening and/or a Secret security clearance. Active Top Secret (TS) clearance required. Citizenship Status Required: Must be a U.S. Citizen Physical Requirements: None required for this position. Location: Remote, US Minimum Salary Rate $77,800.00 Median Salary Rate $85,341.00 Working at DMI DMI is a diverse, prosperous, and rewarding place to work. Our culture is shaped by five core values that guide how we work, grow, and succeed together: Do What’s Right – We lead with honesty and integrity. Own the Outcome – We take responsibility and deliver. Deliver for Our Customers – We are relentless about delivering val

About DMI

DMI is hiring remote talent through Remote Me. All listings are vetted for legitimacy.