Endpoint Engineer

We are seeking an experienced Endpoint Engineer / IT Security Analyst to support enterprise software packaging, patch management, and vulnerability remediation across diverse endpoint environments.

In this role, you will analyze endpoint vulnerability telemetry, build and deploy targeted software packages and patches, and perform root-cause analysis on deployment failures. You will work closely with security, infrastructure, and application teams to maintain a secure, compliant, and highly reliable endpoint ecosystem.

Key Responsibilities

• Software Packaging & Deployment: Engineer, customize, package, test, and deploy Commercial Off-The-Shelf (COTS) software across enterprise endpoints.
• Endpoint Management: Build, maintain, and optimize deployment packages using platforms such as Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), or comparable endpoint management tools.
• Patch Management: Support enterprise OS and third-party patch lifecycles, including compatibility testing, deployment scheduling, pilot validation, and enterprise-wide rollouts.
• Vulnerability Remediation: Monitor and evaluate endpoint vulnerability reports (Rapid7, Qualys, Tenable, Microsoft Defender for Endpoint) to prioritize and execute patch and configuration remediations.
• Troubleshooting & RCA: Diagnose and resolve complex deployment failures, patching errors, and configuration drift; provide detailed root-cause analyses and corrective action plans.
• Automation & Scripting: Develop automated deployment workflows and scripts to increase delivery consistency, speed, and scalability.
• Security & Compliance: Implement and enforce endpoint hardening baselines, configuration policies, and compliance settings across all managed systems.
• Documentation & Standards: Establish and maintain comprehensive documentation for packaging standards, baseline configurations, standard operating procedures (SOPs), and change management records.

• Proven track record in enterprise endpoint engineering, packaging, and configuration management.
• Extensive hands-on experience using Microsoft Intune and MECM/SCCM for software distribution and OS patching.
• Strong background supporting enterprise patch management cycles for Windows OS and third-party applications.
• Familiarity with endpoint security platforms and vulnerability scanners (e.g., Microsoft Defender for Endpoint, Rapid7, Qualys, or Tenable).
• Proficiency in scripting (e.g., PowerShell) for packaging, deployment automation, and system configuration.
• Deep understanding of Windows OS internals, registry architecture, file systems, and group policies.
• Strong analytical and problem-solving skills with demonstrated capability in root-cause analysis.
• Excellent written and verbal communication skills, with experience collaborating across cross-functional IT and security teams., * Experience and proficiency with Windows 11 operating systems and monthly/annual updates (Required 4 Years)
• Experience and proficiency with Microsoft Office 365 applications and monthly updates (Required 4 Years)
• Experience and proficiency using an Endpoint Management System (Required 4 Years)
• Experience and proficiency using a Workstation Imaging Solution (Required 4 Years)
• Experience and proficiency using a Service Management Ticketing System (Required 4 Years)
• Proven analytical and problem-solving abilities (Required 4 Years)
• Excellent verbal and written communication skills (Required 4 Years)
• Ability to work independently with minimal direction and as a team (Required 4 Years)
• Ability to work effectively with end users, technical staff, and senior staff - providing exception customer service (Required 4 Years)
• Experience with Microsoft InTune and Autopilot (Desired 4 Years)
• Experience with Microsoft GraphAPI (Desired 4 Years)
• Experience with PatchMyPC (Desired 4 Years)
• Experience with ServiceNow (Desired 4 Years)
• Experience with PowerShell (Desired 4 Years)