Cloud Service Desk Engineer
Contract to Hire
Bid Support- Start expected mid-August 2026, if awarded
Clearance – Active Top Secret required
Remote
Rate: $55/hr. to $70/hr. commensurate with experience
System One IT is seeking a Cloud Service Desk Engineer to provide engineering-level support for cloud-connected endpoint and identity services at a federal agency client.
This position is in the bid phase, expected to begin in mid-August 2026 if awarded.
In this role, you will handle complex and escalated engineering tickets related to cloud identity, conditional access, device compliance, and remote access — bridging Microsoft cloud services with enterprise endpoint management.
Duties and Responsibilities:
- Engineer and maintain conditional access policies and device compliance requirements in Microsoft Entra ID and Intune, ensuring cloud-connected endpoints meet security posture requirements before granting network access
- Support Microsoft Intune enrollment workflows for cloud-managed devices, including configuration profile deployment and compliance enforcement
- Implement and maintain passwordless authentication and hardware-backed credentials for privileged and sensitive accounts across cloud-connected environments
- Support VDI connectivity engineering, ensuring remote users on macOS and Windows platforms can securely access the virtual desktop environment
- Maintain device enrollment and identity association workflows, ensuring accurate asset inventory and user-to-device linkage across cloud and hybrid environments
- Configure and maintain logging and telemetry for cloud identity and access events; ensure audit trails are forwarded to enterprise SIEM platforms
- Resolve complex and escalated engineering tickets related to cloud services, identity, and access; produce runbooks and documentation for recurring issue patterns
Education and Years of Experience: - Bachelor''s degree in Information Technology, Cybersecurity, or a related field preferred
- Education requirements may be waived based on professional experience, at the government’s discretion
- 8+ years of experience in Information Technology, Endpoint Engineering, or Cybersecurity
- 6+ years performing engineering (not help desk) functions in enterprise environments
- Hands-on experience with Microsoft Entra ID and Intune for cloud identity and device compliance management
- Experience engineering conditional access policies, role-based access, and identity-aware network access controls
- Experience supporting VDI environments and remote access connectivity for Windows and macOS users
- Experience implementing passwordless authentication and hardware-backed credentials in an enterprise environment
- Experience working under formal change control, audit, and security governance processes
Required Skills & Certifications: - Microsoft certifications in identity, endpoint management, or cloud administration
- Experience with Microsoft Sentinel for cloud identity and access telemetry
- Familiarity with hybrid identity environments integrating on-premises Active Directory with Entra ID
Clearance Requirements: Active Top Secret (TS) clearance required.
Citizenship Status Required: Must be a U.S. Citizen
System One, and its subsidiaries including Joulé and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options, including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.
System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.
#M-MM1
#LI-MM1
Ref: #856-Baltimore-S1
Never miss an opportunity! Create an alert based on the job you applied for.