Endpoint Engineer

DKMRBH Inc; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

DKMRBH Inc. is seeking an experienced Endpoint Engineer focused on software deployment, patch management, and vulnerability remediation.

The role emphasizes secure, compliant endpoint environments with hands‑on work on Intune, MECM/SCCM, and related tools. The candidate will collaborate with security, infrastructure, application, and service desk teams to deploy, test, and troubleshoot Windows applications, manage OS and third‑party patches, and drive remediation efforts using industry standard

Qualifications

• Hands-on experience with enterprise endpoint management and software deployment.
• Experience packaging, testing, deploying, and troubleshooting Windows applications.
• Practical knowledge of Intune and MECM/SCCM.
• Experience supporting OS patching and third‑party updates.
• Understanding of vulnerability remediation, security compliance, and configuration management.
• Ability to investigate deployment failures and perform root‑cause analysis.

Responsibilities

• Package, configure, test, and deploy COTS applications across enterprise endpoints.
• Create deployment packages using Intune, MECM/SCCM or comparable platforms.
• Perform compatibility testing and validation across endpoint configurations.
• Manage endpoint patching including testing, scheduling, deployment, and validation.
• Review vulnerability findings and coordinate remediation through updates and configuration changes.
• Analyze vulnerability reports from Rapid7, Qualys, Tenable, Defender for Endpoint, and similar tools.
• Troubleshoot installation failures, patching issues, and compliance gaps.
• Conduct root‑cause analysis and implement corrective actions.
• Develop automation for packaging, deployment, patching, and routine management tasks.
• Implement endpoint hardening standards and security baselines.

Skills

Analytical troubleshooting

Technical documentation

Cross-team collaboration

Attention to detail

Root cause analysis

Tools

Microsoft Intune

MECM/SCCM

Rapid7

Qualys

Tenable

Defender for Endpoint

PowerShell

Job description

Endpoint Engineer — Software Deployment, Patch Management & Vulnerability Remediation

Job Category: Cybersecurity / Endpoint Engineering / IT Infrastructure

Industry: Government / Public Sector IT

Work Arrangement: Hybrid — Onsite Tuesday, Wednesday, and Thursday

Work Schedule: Three onsite days per week

Job Reference: 814050

Job Summary

We are seeking an experienced Endpoint Engineer with hands‑on expertise in enterprise software deployment, patch management, and endpoint vulnerability remediation. This role focuses on maintaining secure, compliant, and reliable endpoint environments by deploying software, managing operating system and third‑party patches, troubleshooting deployment failures, and addressing endpoint security risks.

The ideal candidate will have practical experience with Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), software packaging, vulnerability assessment tools, and endpoint security configuration. Candidates should be comfortable working with security, infrastructure, application, and service desk teams to resolve technical issues and improve endpoint management operations.

Key Responsibilities

• Package, configure, test, and deploy commercial off-the-shelf (COTS) applications across enterprise endpoint environments.
• Create and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or comparable endpoint management platforms.
• Perform application compatibility testing, installation validation, and configuration adjustments across different endpoint configurations.
• Manage endpoint patching activities, including patch testing, deployment scheduling, implementation, and post‑deployment validation.
• Review endpoint vulnerability findings and coordinate remediation through software updates, security patches, and configuration changes.
• Analyze vulnerability reports generated by Rapid7, Qualys, Tenable, Microsoft Defender for Endpoint, and similar security tools.
• Troubleshoot application installation failures, unsuccessful patch deployments, configuration conflicts, and endpoint compliance issues.
• Conduct root‑cause analysis and implement corrective actions to prevent recurring deployment and patching problems.
• Develop automation for software packaging, deployment, patching, and routine endpoint management tasks.
• Implement endpoint hardening standards, security configuration policies, and compliance baselines.

Work Arrangement

This position requires onsite work on Tuesday, Wednesday, and Thursday, with the remaining work arrangement subject to the engagement’s requirements. Contractors must arrange their own parking.

Candidates should have hands‑on endpoint engineering experience rather than vulnerability scanning experience alone. The primary focus is software packaging, enterprise deployment, patch execution, and endpoint remediation.

Professional Skills

Analytical troubleshooting and structured problem‑solving.

Clear technical documentation and communication.

Collaboration across cybersecurity and IT infrastructure teams.

Attention to detail and a strong security‑focused mindset.

Ability to identify recurring technical issues and implement lasting solutions.

Preferred Technical Skills

Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.

PowerShell scripting or comparable automation techniques for endpoint administration.

Endpoint hardening and security baseline implementation.

Application compatibility testing and deployment troubleshooting.

IT change management, technical documentation, and patch compliance reporting.

Required Technical Experience

Hands‑on experience with enterprise endpoint management and software deployment.

Experience packaging, testing, deploying, and troubleshooting Windows applications.

Practical knowledge of Microsoft Intune and/or Microsoft Endpoint Configuration Manager (MECM/SCCM).

Experience supporting operating system patching and third‑party application updates.

Understanding of endpoint vulnerability remediation, security compliance, and configuration management.

Ability to investigate deployment failures and perform root‑cause analysis.

Experience reviewing vulnerability assessment results and coordinating remediation activities.

Additional Responsibilities

• Collaborate with cybersecurity, infrastructure, application, and service desk teams to resolve endpoint‑related issues.
• Maintain technical documentation for software packages, deployment procedures, endpoint configurations, and change management activities.
• Identify opportunities to improve deployment reliability, patch compliance, vulnerability remediation, and endpoint management efficiency.