Endpoint System Engineer

Leidos

2d

About The Position

Leidos Government Health & Safety Solution Group in Windsor Mill, MD in support of the End User Centric IT Support (ECIS) Contract for Centers for Medicare and Medicaid Services (CMS) is looking to improve and advance the organization. Our program is focused on the delivery of end-user centric IT technology solution to our customer CMS where we are challenged to provide ongoing innovative and seamless experience while using CMS systems, applications and solutions, provide proactive secure development of IT integrations, concepts, and designs across the CMS enterprise and integrate end-user computing devices, infrastructure hardware and software, and user applications into a streamlined and seamless experience across the CMS user base. We foster a positive end-user experience while ensuring protection of the data. The successful candidate will be a member of the ECIS Endpoint Engineering Team. The candidate will engineer, deploy, and provide sustaining engineering support for our customer program with focus on PKI/YubiKey engineering support. This role will involve supporting, integrating, configuring, documenting, and maintaining YubiKey implementations to ensure secure access across the CMS environments. Provide support to mature the YubiKey process within CMS including providing recommendations, knowledge base articles (KBAs), process documentation, and ServiceNow integration. The candidate may need to give presentations from time to time and often this entails producing well written technical documents specific to the customer's environment and objectives. The candidate will participate in scrum sprint activities as needed for Endpoint Engineering related solutions. Candidate must be able to speak clearly and communicate effectively (both written and verbally) with a customer's technical staff as well as management. Additional responsibilities will include troubleshooting and working with other technical functional groups, i.e., Service Desk, Datacom, Security and M365 Engineering Services Team for all supported technical issues. Primary Responsibilities Under the direction of the Endpoint Engineering Lead, Product Manager, Program Manager and Deputy Program Manager, your responsibilities are, to include, but not limited to:

Requirements

• The minimum requirements to be considered for the position include a BS degree and 4 – 8 years of relevant experience, or a master’s degree with 2 - 6 years of relevant experience. Additional years of experience may be substituted in lieu of degree.
• Candidates must be able to obtain and maintain a Public Trust or higher security clearance.
• Strong understanding of cryptography, digital certificates, and authentication protocols.
• Experience with YubiKey, smart cards, or other multi-factor authentication devices.
• Proficiency in integrating YubiKey with various platforms (e.g., Windows, macOS, and cloud services).
• Deep understanding of YubiKey hardware and software.
• Strong knowledge of multi-factor authentication (MFA) and public key infrastructure (PKI).
• Experience with scripting and automation (e.g., PowerShell, Python).
• Strong communication and interpersonal skills.
• Strong technical writing and presentation skills with ability to effectively communicate with all levels of customer organization (technical resources, management, vendors)
• Solid understanding of infrastructure services: DNS, WINS, DHCP
• Experience with Microsoft Configuration Manager
• Experience in Active Directory Group/Users/Computers Organizational Units
• Experience in Group Policy/DISA STIG for Windows OS
• Experience with WSUS

Nice To Haves

• Proficiency in programming languages such as JavaScript, C#, and SQL is advantageous.
• Experience with WMI/CIM
• Knowledge of REST APIs, JSON, and OAuth is preferred.
• Excellent problem-solving and analytical skills.
• Previous experience in an agile scrum environment.
• Ability to work independently as well as collaboratively in a team.
• Experience with design, planning and implementation in environments with 10000+ users
• Detail-oriented and highly organized.
• Proactive and adaptable to changing project requirements.
• Experience with change-control principles and utilizing ServiceNow (SNOW).

Responsibilities

• Diagnose, troubleshoot, and resolve all software and hardware related calls/support tickets that are assigned to the team
• Collaborate with CMS security on supporting YubiKey authentication systems to enhance security across all corporate platforms. Ensure seamless integration with existing systems and processes.
• Collaborate with ECIS security team to create and enforce security policies related to multi-factor authentication and YubiKey usage.
• Work closely with Yubico and other vendors to stay updated on the latest features and updates. Coordinate with vendors for support and advanced troubleshooting.
• Regularly update and maintain the YubiKey infrastructure to ensure its robustness and efficiency. Conduct periodic audits and assessments to identify and mitigate potential vulnerabilities.
• Provide expert-level support for YubiKey-related issues. Troubleshoot and resolve complex problems, ensuring minimal downtime and disruption to operations.
• Design, Create, Test and Maintain internal Windows Client Imaging infrastructure
• Perform real-time system monitoring, verifying the integrity of all hardware, applications, systems and key processes
• Windows OS architecture design, engineering and technical experience
• Application packaging and distribution
• Patching of Windows OS using a device management tool such as Microsoft Configuration Manager
• Work with little or no supervision and be able to adapt to changing requirements
• Participating as required with Agile Scrum sprints and other Agile Ceremonies
• Assist in the development of concise and accurate engineering documentation
• Work closely with other teams to ensure seamless integration and alignment
• Promote a collaborative culture, sharing knowledge and fostering innovation
• Work with Asset and Change management with Service Now (SNOW)
• Stay abreast of current and emerging technologies, regularly analyzing and evaluating their impact and benefit to the customer by providing recommendations to management

Benefits

• Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level