Senior Virtualization Engineer / Workspace ONE experience
Location: Joint Base Andrews, MD (100% Onsite)
Salary Range: $135,000–$165,000 annually
Clearance: Active Secret Security Clearance Required
Position Overview:
PGTEK is seeking an experienced Senior Virtualization Engineer to support a Department of Defense customer at Joint Base Andrews. This role will focus on the architecture, implementation, administration, and optimization of Omnissa Workspace ONE solutions across a complex, secure enterprise environment.
The ideal candidate will bring extensive hands-on experience with Workspace ONE Unified Endpoint Management (UEM), formerly VMware AirWatch, along with a strong understanding of mobile device management, enterprise security, Public Key Infrastructure (PKI), and DoD security compliance requirements.
This individual will play a key role in managing enterprise mobility and endpoint environments, supporting secure device deployments, troubleshooting complex technical issues, and providing technical guidance to junior engineers and government personnel.
Key Responsibilities
Architect, deploy, configure, and upgrade Omnissa Workspace ONE UEM, Access, Intelligent Hub, and Tunnel across enterprise environments.
Manage the full device lifecycle for iOS/iPadOS, Android Enterprise (including Samsung Knox), Windows 11, and macOS devices, including enrollment, configuration profiles, compliance policies, application management, and device retirement.
Integrate Apple Business Manager and Automated Device Enrollment, Android Zero-Touch Enrollment, and Samsung Knox Mobile Enrollment.
Implement and support CAC/PIV-based authentication, derived credentials (including DoD Purebred), and certificate authority integrations.
Apply, configure, and validate DISA Security Technical Implementation Guides (STIGs) and Security Requirements Guides (SRGs) across mobile and endpoint platforms.
Develop and maintain technical documentation and compliance evidence to support Risk Management Framework (RMF), Authority to Operate (ATO), ACAS, and CCRI/CORA inspections.
Integrate Workspace ONE with enterprise identity services, including Microsoft Entra ID, Active Directory, and LDAP, as well as PKI, SIEM, and Zero Trust security controls.
Troubleshoot and resolve complex Tier III technical issues involving endpoint management, authentication, device enrollment, connectivity, and security configurations.
Develop technical runbooks, standard operating procedures (SOPs), and knowledge articles to support ongoing operations and maintenance.
Mentor junior engineers and lead knowledge-transfer sessions for government staff and technical teams.
Provide technical briefings, project updates, risk assessments, and recommendations to government leadership and PGTEK program management.
Requirements
Active Secret Security Clearance.
DoD 8140 (formerly DoD 8570) compliant baseline certification at IAT Level II, such as CompTIA Security+ CE or higher.
At least 7 years of experience in enterprise IT, including 5+ years of hands-on experience administering Omnissa Workspace ONE / VMware AirWatch UEM in an enterprise environment supporting 5,000+ devices.
Extensive experience with enterprise mobile device management, particularly iOS and Android Enterprise.
Working knowledge of modern endpoint management for Windows 11 and macOS.
Hands-on experience implementing and maintaining DISA STIGs in a DoD or federal government environment.
Strong understanding of PKI, certificate-based authentication, and CAC/PIV authentication workflows.
Experience integrating enterprise endpoint management platforms with identity management and security infrastructure.
Strong troubleshooting, analytical, and problem-solving skills.
Excellent written and verbal communication skills, with the ability to brief senior military and civilian leadership.
Preferred Qualifications
Omnissa or legacy VMware Workspace ONE certifications, such as VCP-DW or Omnissa Certified Professional –…