Windows Kiosk & Classroom Display Engineer

Colloquium Tech; Pakistan; Remote; PKR 1,800,000 - 3,000,000; Full time

Job summary

Colloquium Tech is seeking an experienced Windows Endpoint Engineer to configure and deploy 10 Windows 11 Pro PCs as secure classroom kiosks. The role centers on Intune enrollment, kiosk mode configuration, and centralized management for remote operation.

The project-based engagement spans discovery, design, pilot, deployment, and handover, with on-site presence for the pilot phase. Strong PowerShell and security expertise are essential.

Qualifications

• 3+ years as a Windows Systems Engineer, Endpoint Engineer, or similar role.

Responsibilities

• Design, configure, and deploy 10 Windows 11 Pro PCs as secure kiosk endpoints.
• Enroll devices into Intune and Entra ID; implement security baselines and device restrictions.
• Configure kiosk modes (Single-App/Multi-App/Restricted Shell) and Intune policies.
• Set up remote management, monitoring, and support via ConnectWise Automate or ScreenConnect.

Skills

Intune configuration

PowerShell scripting

Windows Autopilot

Endpoint security

Kiosk configuration

ConnectWise Automate

Tools

Microsoft Intune

ConnectWise

WDAC/Applocker

Job description

Employment Type: Contract / Project-Based

Work Arrangement: Remote

Project Scope: 10 Windows 11 Pro PCs

Project Overview

We are looking for an experienced Windows Endpoint Engineer to configure and deploy 10 Windows 11 Pro PCs as secure, locked-down classroom kiosks.

Each PC will operate an interactive touch display and run a defined set of classroom applications. All devices must be centrally managed through our existing Microsoft Intune environment and remotely accessible through ConnectWise.

The objective is to build a repeatable kiosk setup that allows our IT support team to deploy, manage, update, monitor, and troubleshoot classroom devices remotely without requiring on-site intervention.

This is a project-based contract engagement, with the possibility of a short-term support arrangement following successful deployment.

Key Responsibilities

1. Discovery & Technical Design

• Review classroom applications, websites, and display requirements.
• Assess PC hardware and interactive display compatibility, including touch, audio, USB, HDMI, and resolution.
• Recommend the appropriate Windows kiosk configuration (Single-App, Multi-App Assigned Access, or Restricted Shell).

2. Windows Baseline & Intune Configuration

• Enroll all 10 PCs into Microsoft Entra ID and Intune (Windows Autopilot preferred).
• Configure security policies and restrict access to unnecessary applications, Settings, Microsoft Store, USB storage, and command-line tools.
• Configure automatic sign-in, power management, sleep settings, and recovery after crashes or reboots.

3. Kiosk & Interactive Display Setup

• Configure and deploy kiosk profiles through Intune.
• Set up application and website allow-lists.
• Configure touch functionality, display scaling, resolution, audio, and multi-display behavior.
• Set up wireless casting and classroom collaboration software where required.

4. Remote Management & Security

• Deploy applications, Windows updates, and security baselines through Intune.
• Configure Windows Update for Business deployment rings.
• Install and configure ConnectWise Automate and/or ScreenConnect agents.
• Enable remote access, monitoring, and alerting.
• Configure BitLocker, Microsoft Defender, and compliance reporting.
• Ensure technicians can remotely troubleshoot, reset, and recover devices without compromising kiosk restrictions.

5. Pilot, Deployment & Handover

• Build and test the complete configuration on one pilot PC.
• Validate functionality in a live classroom environment.
• Roll out the approved configuration to the remaining nine PCs.
• Train IT staff and provide a quick-start guide for teachers.
• Document the complete setup, configuration, and recovery procedures.

Project Deliverables

• 10 Windows 11 PCs enrolled in Intune and running the approved kiosk configuration.
• Fully functional interactive displays, including touch, audio, and display settings.
• ConnectWise agents installed and tested on all devices.
• Exportable and reusable Intune configurations, including profiles, applications, and update policies.
• As-built technical documentation covering configurations, application allow-lists, accounts, and device replacement procedures.
• Remote support and recovery runbook, including troubleshooting, reset, and re-imaging instructions.
• One-page teacher quick-start guide.
• IT staff training and final handover session.

Required Qualifications & Experience

• 3+ years of experience as a Windows Systems Engineer, Endpoint Engineer, or similar role.
• Strong hands-on experience with Microsoft Intune, including:
• Configuration Profiles and Settings Catalog.
• Win32, MSIX, and Microsoft Store app deployment.
• Windows Update for Business and update rings.
• Practical experience with Windows 11 kiosk configurations, including Assigned Access, Shell Launcher, AppLocker, or WDAC.
• Experience with Microsoft Entra ID, Windows Autopilot, and device enrollment.
• Hands-on experience with ConnectWise Automate and/or ScreenConnect.
• Strong PowerShell scripting skills for configuration and remediation.
• Knowledge of Windows security, BitLocker, Defender, local accounts, and least-privilege access.
• Strong documentation and communication skills.

Preferred Qualifications

• Microsoft Certified: Endpoint Administrator Associate (MD-102).
• Experience with K-12 or higher-education classroom technology deployments.
• Familiarity with interactive display platforms such as Promethean, SMART, ViewSonic, or Newline.
• Experience with wireless presentation tools such as Miracast, AirServer, or Barco ClickShare.
• Knowledge of Intune Remediations and Endpoint Analytics.
• Familiarity with ConnectWise PSA ticketing and alert workflows.

Engagement Details

• Contract Type: Project-based, with an optional short-term post-deployment support period.
• Location: Remote configuration and design, with on-site availability required for the pilot and final rollout.
• Project Size: 10 Windows 11 Pro PCs across classroom environments.
• Timeline: To be proposed by the candidate, including estimated hours and milestones for each phase.
• Reporting: IT / Project Manager.

We are looking for someone who can independently design, implement, test, document, and hand over a complete solution — not just configure individual PCs.