Windows Endpoint Engineer
Core
Manage and modernize enterprise Windows endpoint environments, focusing on vulnerability risk reduction, patch management, and security hardening.
Role type
Senior IC Windows Endpoint Engineer
Builds
Patched, secure, and compliant Windows endpoints and applications
Domain
Enterprise IT / Cybersecurity
Required skills
Windows OS administration, Microsoft Intune, SCCM/Configuration Manager, PowerShell scripting, vulnerability management, Active Directory, Group Policy, Entra ID (Azure AD), patch management, security hardening
Preferred skills
Tenable, Qualys, Rapid7, PSADT, PatchMyPC, MSIX, Microsoft Defender for Endpoint, CIS Benchmarks, DISA STIGs, Microsoft MD-102, SC-200, CompTIA Security+
Technologies
Active Directory, Azure, Microsoft Intune, PowerShell, Security, Windows, Cloud, DevOps
Responsibilities
Review vulnerabilities identified through Tenable and manage endpoint remediation from investigation through closure; build, test, package, and deploy fixes through Intune and SCCM; create and maintain PowerShell scripts for automation, detection, and remediation; package and deploy third-party application updates; manage Windows Update policies and patching; work with security teams to triage findings and verify remediation; track remediation progress and report on compliance; maintain Windows configuration baselines and endpoint security hardening standards; support co-management, device onboarding, and compliance policies.
Seniority
Senior, hands-on IC
