Endpoint Engineer

The AES Group; Richmond (VA); Hybrid; USD 96,000 - 103,000; Full time

Job summary

The AES Group is seeking an Endpoint Engineer/Security Analyst in Richmond, VA. This hybrid role (3 days/week) supports enterprise software deployment, patch management, and security hardening across endpoints for a 12-month engagement.

You will deploy COTS software, manage Intune and MECM/SCCM, monitor vulnerabilities, and collaborate with security teams to ensure a compliant, reliable endpoint environment.

Qualifications

• Experience deploying software across enterprise endpoints.
• Strong patch management and OS update experience.
• Vulnerability monitoring and remediation experience.

Responsibilities

• Package and deploy COTS software across endpoints.
• Create deployment packages with Intune, MECM/SCCM, or similar.
• Test compatibility across device profiles; automate deployments.
• Collaborate with security teams on update requirements and risks.
• Support patch management; schedule, deploy and validate updates.
• Monitor vulnerability reports and remediate endpoint risks.
• Troubleshoot deployment and configuration issues; document root causes.
• Maintain packaging standards and change-management documentation.
• Enforce endpoint hardening and baseline configurations.
• Coordinate with infrastructure, security, and service desk teams.
• Evaluate new technologies to optimize endpoint management.

Skills

Windows 11

Office 365

Endpoint Management

Imaging Solution

Ticketing System

Analytical Thinking

Communication

Independent Worker

Customer Service

Intune

Autopilot

Graph API

PatchMyPC

ServiceNow

PowerShell

Tools

MECM/SCCM

Windows Intune

Job description

Endpoint Engineer/Security Analyst

Location: Richmond, VA (Hybrid: 3 days per week. Parking is not provided for contractors)

Duration: 12 Months

Pay Rate: $70-$75/hr

Job Description

Seeking an Endpoint Engineer to support enterprise software and patch deployment activities. This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments. The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed root cause analysis and corrective actions. Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

Responsibilities

• Engineer, modify, package, and deploy commercial off-the-shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM), or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third-party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Skills

• Experience and proficiency with Windows 11 operating systems and monthly/annual updates (Required: 4 Years)
• Experience and proficiency with Microsoft Office 365 applications and monthly updates (Required: 4 Years)
• Experience and proficiency using an Endpoint Management System (Required: 4 Years)
• Experience and proficiency using a Workstation Imaging Solution (Required: 4 Years)
• Experience and proficiency using a Service Management Ticketing System (Required: 4 Years)
• Proven analytical and problem-solving abilities (Required: 4 Years)
• Excellent verbal and written communication skills (Required: 4 Years)
• Ability to work independently with minimal direction and as a team (Required: 4 Years)
• Ability to work effectively with end users, technical staff, and senior staff, providing exceptional customer service (Required: 4 Years)
• Experience with Microsoft Intune and Autopilot (Desired: 4 years)
• Experience with Microsoft Graph API (Desired: 4 years)
• Experience with PatchMyPC (Desired: 4 years)
• Experience with ServiceNow (Desired: 4 years)
• Experience with PowerShell (Desired: 4 years)