Endpoint Engineer (Ref: 18803)

tsu.edu; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

tsu.edu is seeking an experienced Endpoint Engineer / IT Security Analyst to support enterprise software packaging, patch management, and vulnerability remediation across diverse endpoint environments.

You will analyze vulnerability telemetry, build and deploy targeted software packages, and perform root-cause analysis on deployment failures, collaborating with security, infrastructure, and application teams to maintain a secure endpoint ecosystem.

Qualifications

• Proven enterprise endpoint engineering and packaging experience.
• Hands-on with Intune and MECM/SCCM for software distribution and OS patching.
• Experience supporting patch management cycles for Windows and third-party apps.
• Familiarity with endpoint security platforms and vulnerability scanners.
• Scripting in PowerShell for automation and config tasks.
• Deep knowledge of Windows internals, registry, filesystems, and GP.
• Strong analytical and problem-solving skills including root-cause analysis.
• Excellent written and verbal communication across IT and security teams.

Responsibilities

• Package, test, and deploy software across enterprise endpoints.
• Manage endpoint deployment packages via Intune and MECM/SCCM.
• Support OS and third-party patch lifecycles and deployments.
• Monitor vulnerability reports and remediate findings.
• Diagnose deployment issues and perform root-cause analyses.
• Develop automated deployment workflows and scripts.
• Enforce endpoint hardening and compliance settings.
• Document packaging standards and SOPs.

Skills

Intune

MECM/SCCM

Patching

PowerShell

GraphAPI

PatchMyPC

ServiceNow

Vulnerability Scanning

Documentation

Root-cause analysis

Tools

Microsoft Intune

MECM/SCCM

Rapid7

Qualys

Tenable

Microsoft Defender for Endpoint

PowerShell

Job description

Position: Endpoint Engineer (Ref: 18803)

Location: Richmond, VA USA, 23219

Salary: DOE

Duration: 1 Years 2 Months 15 Days - Contract

Openings: 1

Deadline: 10/22/2026

Description:

***Local Candidates
***Hybrid – onsite 3 days/week

We are seeking an experienced Endpoint Engineer / IT Security Analyst to support enterprise software packaging, patch management, and vulnerability remediation across diverse endpoint environments.

In this role, you will analyze endpoint vulnerability telemetry, build and deploy targeted software packages and patches, and perform root-cause analysis on deployment failures. You will work closely with security, infrastructure, and application teams to maintain a secure, compliant, and highly reliable endpoint ecosystem.

Key Responsibilities

• Software Packaging & Deployment: Engineer, customize, package, test, and deploy Commercial Off-The-Shelf (COTS) software across enterprise endpoints.
• Endpoint Management: Build, maintain, and optimize deployment packages using platforms such as Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), or comparable endpoint management tools.
• Patch Management: Support enterprise OS and third-party patch lifecycles, including compatibility testing, deployment scheduling, pilot validation, and enterprise-wide rollouts.
• Vulnerability Remediation: Monitor and evaluate endpoint vulnerability reports (Rapid7, Qualys, Tenable, Microsoft Defender for Endpoint) to prioritize and execute patch and configuration remediations.
• Troubleshooting & RCA: Diagnose and resolve complex deployment failures, patching errors, and configuration drift; provide detailed root-cause analyses and corrective action plans.
• Automation & Scripting: Develop automated deployment workflows and scripts to increase delivery consistency, speed, and scalability.
• Security & Compliance: Implement and enforce endpoint hardening baselines, configuration policies, and compliance settings across all managed systems.
• Documentation & Standards: Establish and maintain comprehensive documentation for packaging standards, baseline configurations, standard operating procedures (SOPs), and change management records.

Required Experience & Qualifications

• Proven track record in enterprise endpoint engineering, packaging, and configuration management.
• Extensive hands-on experience using Microsoft Intune and MECM/SCCM for software distribution and OS patching.
• Strong background supporting enterprise patch management cycles for Windows OS and third-party applications.
• Familiarity with endpoint security platforms and vulnerability scanners (e.g., Microsoft Defender for Endpoint, Rapid7, Qualys, or Tenable).
• Proficiency in scripting (e.g., PowerShell) for packaging, deployment automation, and system configuration.
• Deep understanding of Windows OS internals, registry architecture, file systems, and group policies.
• Strong analytical and problem-solving skills with demonstrated capability in root-cause analysis.
• Excellent written and verbal communication skills, with experience collaborating across cross-functional IT and security teams.

Working Conditions:

• Position Type: Contract (Long Term)
• Location: Richmond, VA (Hybrid: 3 days on-site per week — Tuesday, Wednesday, Thursday)
• Interview Format: Web Cam Only

Required / Desired Skills

• Experience and proficiency with Windows 11 operating systems and monthly/annual updates Required - 4 Years
• Experience and proficiency with Microsoft Office 365 applications and monthly updates Required - 4 Years
• Experience and proficiency using an Endpoint Management System Required - 4 Years
• Experience and proficiency using a Workstation Imaging Solution Required - 4 Years
• Experience and proficiency using a Service Management Ticketing System Required - 4 Years
• Proven analytical and problem-solving abilities Required - 4 Years
• Excellent verbal and written communication skills Required - 4 Years
• Ability to work independently with minimal direction and as a team Required - 4 Years
• Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service Required - 4 Years
• Experience with Microsoft InTune and Autopilot Required - 4 Years
• Experience with Microsoft GraphAPI Required - 4 Years
• Experience with PatchMyPC Required - 4 Years
• Experience with ServiceNow Required - 4 Years
• Experience with PowerShell Required - 4 Years