IT Engineer - Windows and macOS

IT Engineer – Windows and MacOS
Contract to Hire
Bid Support- Start expected Mid-August 2026, if awarded
Clearance – Active Top Secret required
Remote
Rate: $40/hr. to $60/hr. commensurate with experience

System One IT is seeking an IT Engineer to provide engineering-level endpoint and infrastructure support for a federal agency client. This position is in the bid phase, expected to begin in mid-August 2026 if awarded.
This is not a Tier 1 help desk role — you will design, implement, and maintain technical controls across Windows and macOS environments, covering imaging, patch management, device lifecycle, identity engineering, and telemetry to support threat detection and incident response.
 
Duties and Responsibilities:

• Design and maintain secure, standardized workstation images for macOS and Windows platforms, including VDI and remote access configurations
• Engineer and maintain endpoint configuration baselines using Ivanti, KACE, Microsoft Intune, and Windows Autopilot; remediate configuration drift and enforce compliance policies
• Implement and manage OS and application patch management processes; coordinate orchestration, post-deployment validation, and rollback
• Support device enrollment, provisioning, and lifecycle management using Intune, Autopilot, Apple Business Manager, and JAMF; maintain accurate asset inventory
• Configure and maintain endpoint logging and telemetry; ensure log forwarding to enterprise SIEM and EDR platforms
• Follow a formal assessment-to-remediation workflow, producing Findings Reports, Remediation Plans, and Validation Reports for all engineering changes
• Produce and maintain operational runbooks, knowledge transfer materials, and escalation documentation

• Bachelor''s degree in Information Technology, Cybersecurity, or a related field preferred
• Education requirements may be waived based on professional experience, at the government’s discretion
• 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity
• 6+ years performing engineering (not help desk) functions in enterprise environments
• Experience building and maintaining Windows and macOS workstation images, including automation, validation, and rollback 
• Hands-on experience with Ivanti and/or KACE for OS and application patch management 
• Experience with Microsoft Intune and Windows Autopilot for device provisioning and compliance enforcement 
• Experience implementing passwordless authentication and hardware-backed credentials 
• Experience configuring endpoint logging and forwarding telemetry to SIEM and EDR platforms 
• Experience supporting forensic collection and audit readiness 
• Experience working under formal change control, audit, and security governance processes 

• Experience with JAMF Pro for macOS endpoint management
• Microsoft certification in endpoint management or cloud administration
• Prior federal government IT engineering experience

Clearance Requirements:  Active Top Secret (TS) clearance required.

System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M-MM1

#LI-MM1

Ref: #856-Baltimore-S1