Windows Endpoint Engineer
Core
Manage and modernize Windows endpoint environments, focusing on reducing vulnerability risk through patch management, application deployment, and security hardening.
Role type
Mid-level Windows Endpoint Engineer
Builds
Patched, compliant, and hardened Windows client fleet
Domain
Enterprise IT / Cybersecurity
Required skills
Windows OS internals, Microsoft Intune, SCCM/Configuration Manager, PowerShell scripting, Active Directory, Group Policy, Entra ID, vulnerability management, patch management, application packaging (MSI/MSIX), security hardening frameworks (CIS/DISA STIG)
Preferred skills
Tenable Nessus, Qualys, Rapid7, Microsoft Defender for Endpoint, PSADT, PatchMyPC, Microsoft MD-102, SC-200, CompTIA Security
Technologies
Active Directory, Azure, Microsoft Intune, PowerShell, Security, Windows, Cloud, DevOps
Responsibilities
Manage and modernize Windows endpoint environment using Microsoft Intune and SCCM; Review findings from Tenable Nessus and manage endpoint remediation; Build, test, and deploy remediation packages and solutions; Write and maintain PowerShell remediation scripts; Package and deploy third-party application updates; Manage Windows Update policies and maintain patch compliance reporting; Work with security team to triage findings and confirm fixes; Track remediation progress and report on compliance; Maintain configuration baselines and security hardening; Support co-management, device onboarding, and conditional access; Document remediation procedures.