Job Description
Job DescriptionSalary: $135,000 - $150,000
ORGANIZATIONAL BACKGROUND
Established in August 2016, Basecamp Consulting and Solutions is a dynamic Information Technology (IT) consulting firm committed to delivering results for our clients. Specializing in next-generation IT and digital transformation solutions, Basecamp Consulting and Solutions is dedicated to helping clients achieve success through trust, innovation, quality work, and a steadfast commitment to results.
At Basecamp, we believe in the power of emerging technologies to propel our clients toward their goals. Our focus lies in business and IT modernization, utilizing Cloud solutions, cybersecurity, and cutting-edge application development. We pride ourselves on a team of talented professionals who are passionate about supporting our clients on their journey towards innovative outcomes.
Basecamp Consulting and Solutions is dedicated to pushing the boundaries of IT consulting and we are equally committed to embodying these principles in every facet of our work.
POSITION OVERVIEW
Reporting to the Program Manager, the Systems Engineer shall perform Endpoint/identity/device-lifecycle engineering to reduce unauthorized discovery, lateral movement, credential misuse, and persistence. Designs/maintains secure macOS & Windows workstation images (on-site + VDI/remote); engineers patching/version control (Ivanti, KACE, Intune, GPO); supports Intune/Autopilot enrollment with passwordless auth & hardware keys (YubiKey, CAC); builds logging/telemetry into SIEM/EDR; runs assess recommend approve implement validate workflow; produces runbooks and KT. Excludes Tier 1 help desk.
REQUIRED QUALIFICATIONS
- Active Top Secret Clearance
- Core (all J7 roles): 8 yrs IT/Endpoint Engineering/Cybersecurity;
- 6 yrs engineering (not help desk) in enterprise environments;
- Experience under formal change control/audit/security governance.
- Role-specific: Windows & macOS image build/automation/rollback/version control;
- VDI/EDR/auth/logging agent Integration;Ivanti/KACE patching; Intune/Autopilot/JAMF;passwordless& hardware-backed credentials; endpoint logging (Windows Event, macOS Unified Logs) into SIEM (e.g., MS Sentinel); forensic collection/audit readiness.
Preferred education:
- Bachelor's (IT/Cyber/related); substitutable by experience per COR.