About this role

We are looking for an experienced Endpoint Engineer focused on enterprise software deployment, patch management, vulnerability remediation, endpoint security, and troubleshooting.

Key Skills:

Microsoft Intune
MECM / SCCM / Endpoint Configuration Manager
Enterprise software packaging and deployment
Patch management
Vulnerability management
Endpoint security and hardening
PowerShell / automation
Application compatibility testing
Configuration baselines
Rapid7, Qualys, Tenable, and/or Microsoft Defender for Endpoint
Deployment troubleshooting and root-cause analysis

Key Responsibilities:

Engineer, package, modify, and deploy COTS software across enterprise endpoints.
Develop and maintain software deployment packages using Intune and/or MECM/SCCM.
Perform application compatibility testing and configuration adjustments.
Automate software deployment workflows.
Support enterprise patch management, including OS and third-party updates.
Monitor vulnerability reports and prioritize endpoint remediation.
Troubleshoot software deployment and patching failures.
Perform root-cause analysis and implement corrective actions.
Maintain software packaging standards, deployment procedures, endpoint baselines, and change-management documentation.
Implement and enforce endpoint hardening and compliance policies.
Work with application owners, security, infrastructure, and service desk teams.
Evaluate new technologies, updates, and automation opportunities.

Vulnerability & Security Tools:

Experience with any of the following is highly relevant:

Rapid7
Qualys
Tenable
Microsoft Defender for Endpoint

Important Work Requirement:

This is a hybrid position requiring onsite work 3 days per week – Tuesday, Wednesday, and Thursday.

IT Security Analyst 3 – Endpoint Engineer (Software/Patch)

Key skills

About this role