Windows Client Engineer - Hybrid
Core
Manage and modernize Windows endpoint environments in an enterprise setting, focusing on vulnerability remediation, patch management, and security hardening.
Role type
Senior Windows Client Engineer (Endpoint Management)
Builds
Remediation packages, PowerShell automation scripts, and deployment solutions for Windows clients.
Domain
Enterprise IT / Cybersecurity / Endpoint Management
Required skills
Windows OS internals, Microsoft Intune, SCCM/Configuration Manager, PowerShell scripting, Active Directory, Group Policy, Entra ID (Azure AD), vulnerability management, patch management, application packaging (MSI/MSIX), security hardening frameworks.
Preferred skills
Tenable, Microsoft Defender for Endpoint, PSADT, PatchMyPC, CIS Benchmarks, DISA STIGs.
Technologies
Active Directory, Azure, Microsoft Intune, Network, PowerShell, Security, Windows, Cloud, DevOps
Responsibilities
Review and manage endpoint-side remediation for outstanding vulnerabilities. Build, test, and deploy remediation packages using Intune and SCCM. Create and maintain PowerShell scripts for detection and remediation. Manage Windows Update policies via Windows Update for Business, WSUS, or SCCM. Package and deploy third-party application updates. Work with security teams to triage findings and confirm fixes. Track remediation progress and report compliance against SLAs. Maintain configuration baselines and security hardening across the fleet. Support device onboarding, compliance policies, and conditional access.
Seniority
Mid-Senior, hands-on IC