Windows Engineer

Akkodis is seeking a Windows Client Engineer - Endpoint & Vulnerability Remediation for a Contract with a client located Pittsburgh PA- Onsite, strong-hands on experience with Microsoft Windows Client/Server Operating Systems, perform vulnerability investigation, remediation, Microsoft Intune and SCCM., Vulnerability Remediation: Own the end-to-end remediation workflow for findings identified by Tenable (Tenable.io / Nessus / SecurityCenter) through deployment, verification, and closure.

Packaging & Scripting: Develop, test, and deploy packages, registry fixes, third-party app updates (e.g., Win32 apps, PatchMyPC), and PowerShell scripts (including Intune Proactive Remediations and SCCM Configuration Items).

Patch & Endpoint Management: Configure Windows Update policies (WUfB, WSUS, SCCM SUGs), oversee security hardening (CIS/DISA STIG baselines), and maintain co-management, onboarding, and conditional access policies.

Security Partnership & Compliance: Work closely with security teams to triage findings and address false positives, track SLA compliance, report on risk reduction, and maintain thorough technical documentation.

*Bachelor’s degree or higher required

• Top (2) skills:

(1) Proficiency with Microsoft Windows Client/Server Operating Systems

(2) Self-starter - ability to perform vulnerability investigation and remediation

Core Objective: Manage and modernize the Windows endpoint fleet (Intune/SCCM) with a heavy focus on security vulnerability remediation., * 3-5 years of experience engineering and administering Windows endpoints in an enterprise environment.

• Hands-on experience with both Microsoft Intune and SCCM/Configuration Manager, including application packaging and deployment.
• Strong PowerShell scripting skills for automation, detection, and remediation.
• Experience with Windows patch management (Windows Update for Business, WSUS, or SCCM software updates).
• Familiarity with vulnerability management concepts and tooling - Tenable experience strongly preferred; comparable tools (Qualys, Rapid7) also relevant.
• Understanding of CVEs, CVSS scoring, and how vulnerability findings map to real remediation actions.
• Solid grasp of Windows OS internals, Active Directory, Group Policy, and Entra ID (Azure AD).
• Ability to test changes carefully and roll out fixes without disrupting end users.

Nice to have:

• Experience with application packaging tools (PSADT, PatchMyPC) and MSI/MSIX.
• Exposure to Microsoft Defender for Endpoint and its vulnerability management (TVM) integration.
• Knowledge of security hardening frameworks (CIS Benchmarks, DISA STIGs).
• Relevant certifications (Microsoft MD-102, SC-200, or CompTIA Security+).

Rate Range: $50/hr - $52/hr (The rate may be negotiable based on experience, education, geographic location, and other factors)

To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-policy.

The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicable:

• The California Fair Chance Act
• Los Angeles City Fair Chance Ordinance
• Los Angeles County Fair Chance Ordinance for Employers