> Markdown version of [/jobs/ext/3841090-it-security-analyst-3-endpoint-engineer-software-patch](https://www.wearedevelopers.com/jobs/ext/3841090-it-security-analyst-3-endpoint-engineer-software-patch). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IT Security Analyst 3 Endpoint Engineer (Software/Patch)

- **Company:** Kainos
- **Location:** Richmond, VA, United States
- **Contract:** Contract
- **Skills:** Microsoft Windows, Configuration Management, Cyber Security, System Center Configuration Manager, Windows PowerShell, Software Deployment, Software Vulnerability Management, Enterprise Software Applications, Microsoft InTune, Azure Security Center, Infrastructure Automation Frameworks, Deployment Automation, Patch Management, CIS Benchmarks, Qualys, Vulnerability Analysis
- **Published:** October 20, 2026
- **Apply:** https://www.dice.com/job-detail/9ab7ca51-e0d0-48ec-895a-96eccdc51382

## About the Role

Seeking an experienced Endpoint Engineer to manage enterprise software packaging, deployment, patch management, and endpoint vulnerability remediation. The ideal candidate will have hands-on experience with Microsoft Intune, MECM/SCCM, endpoint security tools, and deployment automation., * Microsoft Intune

 * MECM/SCCM (Microsoft Endpoint Configuration Manager)
 * Enterprise software packaging and deployment
 * Windows endpoint management and patch management
 * Vulnerability assessment and remediation
 * PowerShell scripting and deployment automation
 * Endpoint security and configuration management
 * Troubleshooting and root-cause analysis
 * Change management and technical documentation

Preferred Skills

 * Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint
 * Windows endpoint hardening and security baselines
 * Third-party application patching
 * Enterprise vulnerability remediation and compliance management

## Description

* Package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoints.
 * Develop and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or similar tools.
 * Manage OS and third-party software patching, including testing, scheduling, deployment, and validation.
 * Analyze vulnerability reports and remediate endpoint vulnerabilities using tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.
 * Troubleshoot deployment failures, patching issues, and configuration problems; perform root-cause analysis.
 * Automate software deployment and patch management workflows using scripting and automation tools.
 * Implement endpoint hardening, security compliance policies, and configuration baselines.
 * Collaborate with security, infrastructure, application, and service desk teams.
 * Maintain technical documentation and follow change management procedures.