Endpoint Specialist (Windows & Mac)

**RESULTS. INNOVATION. VALUES. ACCOUNTABILITY. That's RIVA. ** We're a mission-driven IT services company and systems integrator supporting digital transformation and modernization for federal government agencies. Since 2009, we've partnered with our customers to solve complex challenges through smart, practical innovation to deliver real outcomes where they matter most. Our teams are made up of industry-leading experts who are passionate about doing great work and making a difference. We don't just develop solutions, we support efforts that strengthen communities and serve the public good. RIVA's culture is built on four core values: Results, Innovation, Values, and Accountability. They guide how we work, how we collaborate, and how we measure success. Our employee-first approach is rooted in trust, ownership, and meaningful work. By investing in our people and fostering a flexible, supportive environment, employees have the opportunity to grow their skills, contribute ideas, and make an impact from day one. all while supporting missions that matter. POSITION OVERVIEW RIVA Solutions is seeking an Endpoint Specialist (Windows & Mac) to support enterprise endpoint security and lifecycle management under the NTIA ISCOM contract. This role is responsible for managing and securing Windows and Macintosh laptop endpoints across the enterprise, ensuring proper configuration, patch management, operating system updates, and compliance with federal cybersecurity standards. The ideal candidate will bring hands-on experience administering macOS and Windows devices in a secure enterprise environment, with strong familiarity in mobile device management, enterprise patching, endpoint compliance, and cross-functional coordination with cybersecurity teams. This role is well suited for a technical professional who is detail-oriented, operationally strong, and committed to maintaining secure and reliable endpoint services. CORE RESPONSIBILITIES - Manage and secure Windows and Macintosh laptop endpoints, including system configuration, baseline enforcement, patch deployment, and lifecycle management - Implement and maintain Mobile Device Management (MDM) solutions to enforce endpoint security policies and compliance controls across macOS and Windows environments - Administer and secure Macintosh devices using JAMF Pro, including device enrollment, configuration profiles, software distribution, and compliance monitoring - Utilize enterprise patch management tools, including BigFix and related technologies, to ensure timely deployment of operating system and third-party application updates - Oversee endpoint configuration standards and ensure alignment with federal security requirements and organizational hardening guidelines - Monitor endpoint health, patch compliance, and vulnerability remediation through reporting dashboards and security tools - Collaborate directly with cybersecurity teams to ensure endpoint security controls, EDR tools, and patching strategies align with NTIA's broader security posture and compliance framework - Support implementation and enforcement of endpoint security baselines, including encryption, access controls, MFA integration, and device policy enforcement - Troubleshoot and resolve issues related to device enrollment, patch failures, configuration drift, and security policy enforcement - Maintain documentation, SOPs, and reporting artifacts to support audits, compliance reviews, and operational transparency - Provide professional and timely support to NTIA users while maintaining secure and reliable endpoint operations MINIMUM QUALIFICATIONS - Bachelor's degree in Information Technology, Computer Science, or a related field, or equivalent combination of education and relevant experience - Minimum of 5 years of IT or endpoint administration experience - U.S. Citizenship required with an active Secret clearance - Foundational exp rience managing macOS and Windows devices in an enterprise or federal environment - Familiarity with BigFix and macOS MDM frameworks such as JAMF and Intune - Knowledge of scripting languages such as PowerShell or Bash for automation and remediation tasks - Understanding of system patching, software distribution, and compliance reporting - Strong communication skills, attention to detail, and commitment to maintaining secure and reliable endpoint operations PREFERRED QUALIFICATIONS - CompTIA certifications such as A+, Network+, Security+, or AZ-900 - Microsoft or IBM certifications related to BigFix administration - Apple Certified Support Professional (ACSP) or equivalent macOS certification - Experience managing Apple Business Manager and automated MDM enrollment workflows - Familiarity with Active Directory, Azure AD, Microsoft Intune, and identity management for cross-platform devices - Experience with endpoint detection and response (EDR) tools and vulnerability management practices - Experience working within a federal or enterprise IT environment with stringent security compliance requirements - Experience with imaging deployment and Windows Autopilot The salary or salary range for this role reflects an estimated range informed by multiple compensation factors. Final offers may vary based on considerations such as relevant experience, education and training, critical skillsets, and overall business needs. Pay range - $125,000---$135,000 USD - EQUAL EMPLOYMENT OPPORTUNITY & ACCOMMODATION We believe great teams are built from different backgrounds, perspectives, and lived experiences, and we mean that beyond the buzzwords. RIVA is an equal opportunity employer. We welcome applicants of every race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, and any other characteristic protected by law. If you need an accommodation at any point in our process, send an email to [email protected], we'll be happy to help. VETERAN SUPPORT & ACCESSIBILITYAs a federal contractor, RIVA follows the requirements of the Vietnam Era Veterans' Readjustment Assistance Act (VEVRAA) and Section 503 of the Rehabilitation Act, supporting the employment and advancement of protected veterans and individuals with disabilities. If you're a veteran, we encourage you to self-identify during the application process, it helps us track our hiring commitments and, in some cases, may support priority referral for open roles. RIVA also invites applicants to voluntarily self-identify as having a disability during the application process, not because it affects your chances of being hired, but because it helps us measure how well we're living up to our commitments