Endpoint Security & Deployment Engineer — Hybrid VA

Kainos Innovative Solutions Inc; Richmond (VA); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Kainos Innovative Solutions Inc is seeking an experienced IT Security Analyst 3 — Endpoint Engineer to manage enterprise software packaging, deployment, and patch management for Windows endpoints in a hybrid Richmond, VA environment. Expect hands-on work with Intune, MECM/SCCM, and endpoint security tooling.

The role emphasizes vulnerability remediation, scripting for automation, and collaboration across security, infrastructure, and service desk teams, with standard change-management

Qualifications

• Hands-on experience with Intune and MECM/SCCM for packaging and deployment.

Responsibilities

• Package, configure, test, and deploy COTS software across endpoints.
• Develop and maintain deployment packages using Intune and MECM/SCCM.
• Manage OS and third-party patching: testing, scheduling, deployment, validation.
• Analyze vulnerability reports and remediate endpoints using Rapid7, Qualys, Tenable, or Defender.
• Troubleshoot deployment failures and perform root-cause analysis.
• Automate software deployment and patch workflows with scripting.
• Implement endpoint hardening and security baselines.
• Collaborate with security, infrastructure, application, and service desk teams.
• Maintain technical docs and follow change management procedures.

Skills

Microsoft Intune

MECM/SCCM

Endpoint packaging & deployment

Patch management

Vulnerability remediation

PowerShell scripting

Endpoint security & baselines

Root-cause analysis

Change management

Tools

Rapid7

Qualys

Tenables

Defender for Endpoint

Job description

Kainos Innovative Solutions Inc is seeking an experienced IT Security Analyst 3 — Endpoint Engineer to manage enterprise software packaging, deployment, and patch management for Windows endpoints in a hybrid Richmond, VA environment. Expect hands-on work with Intune, MECM/SCCM, and endpoint security tooling.

The role emphasizes vulnerability remediation, scripting for automation, and collaboration across security, infrastructure, and service desk teams, with standard change-management