Senior Endpoint Engineering Consultant

Job Overview

Enterprise Solutions, Inc. (ESI) is seeking a Senior Endpoint Engineering Consultant to support a Fairfax County endpoint modernization and PC replacement initiative.

The consultant will assess and modernize the County’s existing Windows endpoint architecture, standard device build, hardware configurations, and deployment practices. The primary objective is to determine whether the current enterprise image and hardware standards are appropriately optimized for different workforce needs.

The selected consultant will evaluate the current Windows 11 golden image, analyze endpoint performance and utilization data across a representative sample of agencies and users, and establish evidence-based device profiles. This includes determining whether a 16GB RAM/512GB storage configuration can support the standard workforce and defining the workloads and technical criteria that justify an enhanced 32GB RAM/1TB configuration.

This is a senior engineering and analysis role—not a desktop support or routine PC deployment position. The successful candidate must be able to analyze endpoint telemetry, identify performance constraints, recommend technical standards, and translate findings into a repeatable device-right-sizing methodology.

Key Responsibilities

• Assess the existing Windows 11 enterprise build and endpoint architecture.
• Evaluate the current golden image for unnecessary applications, legacy configurations, startup processes, background services, security tools, management agents, and other sources of performance degradation.
• Recommend which applications and components should remain standard, become optional or on-demand, be modernized, or be removed.
• Review and optimize Windows 11 configurations, policies, services, application packages, and device-management settings.
• Analyze CPU, memory, disk, storage, boot, login, and application-performance data across a representative sample of County devices.
• Segment endpoint utilization by agency, user type, workload, application profile, or other relevant business classifications.
• Evaluate the cumulative endpoint impact of Microsoft 365, VPN software, cybersecurity tools, monitoring agents, management platforms, and line-of-business applications.
• Determine whether 16GB RAM and 512GB storage are sufficient for the County’s standard workforce profile.
• Identify specialized workloads that require an enhanced 32GB RAM and 1TB storage configuration.
• Develop measurable technical criteria and approval standards for hardware exceptions.
• Configure or use Microsoft Intune, Microsoft Configuration Manager/SCCM, Swimage, or related tools to obtain and evaluate endpoint data.
• Support build testing, application validation, pilot deployments, and production rollout activities.
• Identify performance, compatibility, configuration, and deployment risks before broader implementation.
• Develop a repeatable reporting process or dashboard for ongoing device utilization analysis and hardware right-sizing.
• Document technical findings, configuration standards, hardware profiles, exception criteria, and implementation recommendations.
• Provide knowledge transfer to County endpoint engineering, operations, and support teams.
• Present findings and recommendations clearly to technical teams, management, and business stakeholders.

Primary Project Deliverables1. Golden Image and Standard Build Assessment

• Inventory and assess the applications, agents, services, policies, and configurations included in the current enterprise build.
• Identify unnecessary, redundant, outdated, or performance-impacting components.
• Recommend a modernized standard build, including standard, optional/on-demand, modernized, and removed components.
• Document recommended Windows 11 optimization and configuration changes.

2. Endpoint Utilization and Hardware Right-Sizing Analysis

• Analyze a representative sample of existing 32GB RAM/1TB devices across multiple agencies and user profiles.
• Evaluate actual CPU, memory, storage, boot, login, and application-utilization patterns.
• Establish evidence-based hardware profiles, including:
• Standard Device: 16GB RAM/512GB storage
• Enhanced Device: 32GB RAM/1TB storage
• Define the applications, workload patterns, utilization thresholds, and other technical criteria that qualify a user for an Enhanced Device.
• Document findings and recommendations in a format that supports procurement and deployment decisions.

3. Standards, Reporting, and Knowledge Transfer

• Produce documented endpoint-build and hardware standards.
• Develop a repeatable methodology for evaluating device performance and right-sizing.
• Recommend, map, or develop a dashboard for ongoing endpoint utilization and device-profile reporting.
• Conduct knowledge-transfer sessions with designated County personnel.

Required Qualifications

• Senior-level experience in Windows endpoint engineering, endpoint architecture, performance engineering, and enterprise device deployment.
• Strong hands-on experience engineering, configuring, optimizing, and troubleshooting Windows 11 enterprise environments.
• Experience with Microsoft Intune/Microsoft Endpoint Manager, including:
• Configuration profiles
• Compliance and security policies
• Application packaging and deployment
• Device configuration and inventory
• Endpoint analytics and reporting
• Experience assessing and optimizing enterprise golden images or standard device builds.
• Demonstrated ability to analyze endpoint CPU, memory, disk, storage, boot, login, and application-performance data.
• Experience using endpoint telemetry to develop hardware standards or device personas.
• Strong understanding of how Microsoft 365, endpoint-security products, VPN clients, management agents, and enterprise applications affect device performance.
• Experience with enterprise application testing, build validation, pilot deployments, and production rollouts.
• Ability to translate technical data into actionable hardware, configuration, and deployment recommendations.
• Strong technical documentation, analytical, presentation, and knowledge-transfer skills.
• Ability to work independently and deliver defined results within a short-term consulting engagement.

Preferred Qualifications

• Experience with Microsoft Configuration Manager/SCCM, Swimage, Windows Autopilot, PowerShell, or comparable endpoint deployment and automation tools.
• Experience developing dashboards or reports using Intune Endpoint Analytics, Configuration Manager, Power BI, Log Analytics, or similar platforms.
• Experience supporting endpoint modernization or large-scale PC replacement programs in a government or similarly complex enterprise environment.
• Experience developing user personas, workload profiles, hardware standards, and exception-governance processes.
• Knowledge of modern endpoint-management practices, including cloud-native provisioning, application modernization, and policy-based configuration.
• Relevant Microsoft certifications in endpoint administration, Microsoft 365, Azure, or related technologies.

The ideal candidate combines deep Windows endpoint engineering expertise with strong data-analysis and consulting skills. The consultant should be comfortable examining a complex enterprise build, questioning legacy assumptions, analyzing real-world device telemetry, and developing defensible standards that distinguish standard workforce needs from legitimate enhanced-computing requirements.

Pay: $75.00 - $90.00 per hour

Work Location: Hybrid remote in Fairfax, VA 22035