Endpoint System Engineer

Leidos Government Health & Safety Solution Group in Windsor Mill, MD in support of the End User Centric IT Support (ECIS) Contract for Centers for Medicare and Medicaid Services (CMS) is looking to improve and advance the organization. Our program is focused on the delivery of end-user centric IT technology solution to our customer CMS where we are challenged to provide ongoing innovative and seamless experience while using CMS systems, applications and solutions, provide proactive secure development of IT integrations, concepts, and designs across the CMS enterprise and integrate end-user computing devices, infrastructure hardware and software, and user applications into a streamlined and seamless experience across the CMS user base. We foster a positive end-user experience while ensuring protection of the data. The successful candidate will be a member of the ECIS Endpoint Engineering Team. The candidate will engineer, deploy, and provide sustaining engineering support for our customer program with focus on PKI/YubiKey engineering support. This role will involve supporting, integrating, configuring, documenting, and maintaining YubiKey implementations to ensure secure access across the CMS environments. Provide support to mature the YubiKey process within CMS including providing recommendations, knowledge base articles (KBAs), process documentation, and ServiceNow integration. The candidate may need to give presentations from time to time and often this entails producing well written technical documents specific to the customer's environment and objectives. The candidate will participate in scrum sprint activities as needed for Endpoint Engineering related solutions. Candidate must be able to speak clearly and communicate effectively (both written and verbally) with a customer's technical staff as well as management. Additional responsibilities will include troubleshooting and working with other technical functional groups, i.e., Service Desk, Datacom, Security and M365 Engineering Services Team for all supported technical issues.

• Primary Responsibilities
• Under the direction of the Endpoint Engineering Lead, Product Manager, Program Manager and Deputy Program Manager, your responsibilities are, to include, but not limited to:
• Diagnose, troubleshoot, and resolve all software and hardware related calls/support tickets that are assigned to the team
• Collaborate with CMS security on supporting YubiKey authentication systems to enhance security across all corporate platforms. Ensure seamless integration with existing systems and processes.
• Collaborate with ECIS security team to create and enforce security policies related to multi-factor authentication and YubiKey usage.
• Work closely with Yubico and other vendors to stay updated on the latest features and updates. Coordinate with vendors for support and advanced troubleshooting.
• Regularly update and maintain the YubiKey infrastructure to ensure its robustness and efficiency. Conduct periodic audits and assessments to identify and mitigate potential vulnerabilities.
• Provide expert-level support for YubiKey-related issues. Troubleshoot and resolve complex problems, ensuring minimal downtime and disruption to operations.
• Design, Create, Test and Maintain internal Windows Client Imaging infrastructure
• Perform real-time system monitoring, verifying the integrity of all hardware, applications, systems and key processes
• Windows OS architecture design, engineering and technical experience
• Application packaging and distribution
• Patching of Windows OS using a device management tool such as Microsoft Configuration Manager
• Work with little or no supervision and be able to adapt to changing requirements
• Participating as required with Agile Scrum sprints and other Agile Ceremonies
• Assist in the development of concise and accurate engineering documentation Work closely with other teams to ensure seamless integration and alignment
• Promote a collaborative culture, sharing knowledge and fostering innovation
• Work with Asset and Change management with Service Now (SNOW)
• Stay abreast of current and emerging technologies, regularly analyzing and evaluating their impact and benefit to the customer by providing recommendations to management

• Basic Qualifications
• The minimum requirements to be considered for the position include a BS degree and 4 - 8 years of relevant experience, or a master's degree with 2 - 6 years of relevant experience. Additional years of experience may be substituted in lieu of degree.
• Candidates must be able to obtain and maintain a Public Trust or higher security clearance.
• Strong understanding of cryptography, digital certificates, and authentication protocols.
• Experience with YubiKey, smart cards, or other multi-factor authentication devices.
• Proficiency in integrating YubiKey with various platforms (e.g., Windows, macOS, and cloud services).
• Deep understanding of YubiKey hardware and software.
• Strong knowledge of multi-factor authentication (MFA) and public key infrastructure (PKI).
• Experience with scripting and automation (e.g., PowerShell, Python).
• Strong communication and interpersonal skills.
• Strong technical writing and presentation skills with ability to effectively communicate with all levels of customer organization (technical resources, management, vendors)
• Solid understanding of infrastructure services: DNS, WINS, DHCP
• Experience with Microsoft Configuration Manager
• Experience in Active Directory Group/Users/Computers Organizational Units
• Experience in Group Policy/DISA STIG for Windows OS
• Experience with WSUS

• Preferred Qualifications
• Proficiency in programming languages such as JavaScript, C#, and SQL is advantageous.
• Experience with WMI/CIM
• Knowledge of REST APIs, JSON, and OAuth is preferred.
• Excellent problem-solving and analytical skills.
• Previous experience in an agile scrum environment.
• Ability to work independently as well as collaboratively in a team.
• Experience with design, planning and implementation in environments with 10000+ users
• Detail-oriented and highly organized.
• Proactive and adaptable to changing project requirements.
• Experience with change-control principles and utilizing ServiceNow (SNOW).

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:
January 20, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:
Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.