Endpoint Management & Remediation End point

seeking an Endpoint Management & Remediation Engineer to join our premier client’s Infrastructure Risk Remediation Team in Washington, DC.

In this high-visibility role, you will serve as a vital technical contributor responsible for maintaining robust endpoint health, driving automated vulnerability remediation, and ensuring total PCI compliance across a large-scale enterprise environment. Operating at the intersection of systems engineering and cybersecurity, you will leverage Microsoft Intune, MECM/SCCM, and advanced PowerShell automation to package applications, deploy monthly security patches, and deliver precise compliance reporting across hybrid identity infrastructures.

Endpoint Administration: Manage and configure enterprise mobile devices and Windows endpoints using Microsoft Intune (MDM) and MECM/SCCM.

Patch Management: Execute full lifecycle MECM/SCCM monthly security patching campaigns to eliminate system vulnerabilities across the enterprise.

Application Packaging: Create, test, and deploy software application packages via Intune and MECM/SCCM.

Vulnerability Remediation: Function as a key analyst on the Infrastructure Risk Remediation Team, prioritizing and remediating security gaps to maintain strict PCI compliance.

4+ years of hands-on experience in enterprise systems administration focusing on Microsoft Intune, MECM/SCCM, and Active Directory / Azure AD.

Proven track record in vulnerability remediation and maintaining strict regulatory compliance frameworks (PCI-DSS experience strongly preferred).

Advanced proficiency in PowerShell scripting for systems management and deployment automation.

Demonstrated expertise in application packaging, OS deployment, and enterprise patch deployment methodologies.

Strong experience building operational reports using ServiceNow (SNOW) and MECM data streams.

Excellent analytical, problem-solving, and cross-functional communication skills.

Automation & Scripting:

Write, optimize, and maintain Windows PowerShell scripts to automate administrative tasks, software deployments, and compliance fixes.

Identity & Access Management:

Administer Azure Active Directory (Microsoft Entra ID) and legacy Active Directory environments to enforce secure endpoint policies.

Reporting & Visibility:

Generate actionable asset, patch, and configuration reports using MECM/SCCM and ServiceNow (SNOW) to support risk metrics and audit readiness.