IT Security Analyst 3

client is seeking an experienced Endpoint Engineer specializing in enterprise software deployment, patch management, and endpoint security. The selected candidate will support enterprise endpoint environments by packaging and deploying commercial off-the-shelf (COTS) software, managing OS and third-party patches, reviewing vulnerability reports, and remediating endpoint security risks., Engineer, package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoint environments. Develop and maintain software deployment packages using Microsoft Intune, MECM/SCCM, or similar endpoint management platforms. Perform application compatibility testing and troubleshoot software installation and configuration issues. Automate software packaging and deployment workflows to improve efficiency and consistency. Collaborate with application owners and security teams to assess software updates, dependencies, and deployment risks. Manage enterprise patch deployment activities, including testing, scheduling, implementation, and validation of operating system and third-party patches. Review vulnerability reports from tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint. Prioritize and remediate endpoint vulnerabilities in accordance with security requirements. Troubleshoot deployment failures, patching issues, and endpoint configuration problems, performing root-cause analysis and implementing corrective actions. Maintain documentation for software packaging standards, deployment procedures, endpoint configuration baselines, and change management. Implement and maintain endpoint hardening policies, security compliance settings, and configuration baselines. Collaborate with infrastructure, cybersecurity, and service desk teams to maintain endpoint reliability and security. Identify opportunities to improve endpoint management processes through automation and emerging technologies.

Required Technical Skills Microsoft Intune Microsoft Endpoint Configuration Manager (MECM/SCCM) Enterprise software packaging and deployment Windows OS and third-party patch management Endpoint vulnerability remediation Vulnerability assessment tools such as Rapid7, Qualys, or Tenable Microsoft Defender for Endpoint Deployment troubleshooting and root-cause analysis PowerShell scripting and deployment automation Endpoint security hardening and configuration management Change management and technical documentation

The ideal candidate will have hands-on experience with Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), endpoint management tools, vulnerability assessment platforms, and deployment automation.