Job Description

Ensure reliable, secure, and high-performing desktop, laptop, mobile and peripheral hardware/software operations. Work with a team of engineers on device lifecycles and drive modern IT automation.

Responsibilities

• Administer endpoint management platforms including Microsoft Intune and related configuration management tools to enforce patch compliance, device encryption, application deployment standards, and endpoint security configurations consistent with industry cybersecurity control frameworks
• Enterprise patch management cycles for endpoints, ensuring timely vulnerability remediation, documentation within ITSM change workflows, and validation of successful deployment prior to closure
• Collaborate with Identity, Credential, and Access Management (ICAM) teams to ensure workstation authentication controls, MFA enforcement, certificate deployment, and conditional access configurations are functioning properly within Microsoft Entra ID and Microsoft 365 integrations
• Validate endpoint log forwarding and monitoring integration with enterprise monitoring platforms to ensure visibility into device health, configuration compliance, and potential security anomalies
• Produce and maintain workstation engineering documentation including gold image standards, configuration baselines, lifecycle refresh schedules, and compliance dashboards
• Support root cause analysis for enterprise-wide endpoint incidents, configuration conflicts, or patch deployment failures and implement corrective actions to prevent recurrence
• Participate in Change Advisory Board (CAB) reviews to assess risk and approve major workstation environment changes prior to deployment.

Minimum Qualifications:

• Bachelor's Degree and 0-3 years of relevant experience OR an associate’s degree with 4 years of relevant experience. 8 years of relevant experience will also be considered in lieu of a degree.
• Collaborate with other staff to research and resolve problems.
• Demonstrate confidence, teamwork, promote collaboration, and communicate well with senior management, end users, and other customers.
• Maintains knowledge of technology innovations and trends.
• Ability to communicate with all levels of personnel up to and including senior executives.
• For ability to obtain and maintain a security clearance, US Citizenship is Legally Required

Preferred Qualifications:

• Experience engineering enterprise Windows desktop environments and secure configuration baselines
• Knowledge of endpoint management platforms including Intune or similar device management tools
• Experience administering endpoint patch management and application deployment processes
• Familiarity with endpoint encryption, Defender security controls, and compliance reporting
• Experience integrating workstation logs with SIEM platforms
• Knowledge of lifecycle refresh planning and endpoint inventory management
• Preferred Certifications: Microsoft Certified: Endpoint Administrator Associate; CompTIA Security+

"We put science to work!"

Savannah River National Laboratory (SRNL) is a multi-program laboratory applying state of the art science and practical, high-value, cost-effective solutions to complex technical problems to protect the nation. Located at the U.S. Department of Energy’s (DOE) Savannah River Site (SRS) in Aiken SC, the laboratory develops and deploys innovative technologies to address some of the nation’s environmental, energy, and national security challenges.

Battelle Savannah River Alliance (BSRA) is constantly assessing trends to provide the best possible benefits to our workforce. We also negotiate cost effective premiums that will meet the needs of our evolving workforce.

Some of the *Benefits offered to employees include:

*Benefits vary based upon employment status

• Highly competitive Medical, Dental, and Vision options including HSA options with company provided seed
• Short- & Long-Term Disability (company paid)
• Life Insurance Non-Contributary 1X salary (company paid)
• AD&D Non-contributary 1x salary (company paid)
• Savings & Investment plan:
• Qualified Non-Elective Company Contribution of 5% each pay period with immediate vesting
• Company match 50 cents/dollar up to 8% (5 yrs. vesting in company match)
• Contributory Life Insurance up to 5x Salary with $1M Cap
• Contributory AD&D (employee, spouse and children)
• Paid Time Off
• Employee Assistance Plan
• SRNL offers a competitive relocation package to ease the transition process. Domestic and international relocation assistance is available for certain positions.

For more information about our benefits, working here, and living here, visit the “About” tab at www.srnl.doe.gov.

BSRA is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status. BSRA is also committed to making our workplace accessible to individuals with disabilities and will provide reasonable accommodations, upon request, for individuals to participate in the application and hiring process. Please email us at SRNLRecruiting@srnl.gov with any questions regarding the hiring process or to request an accommodation.