Endpoint Security Engineer

MasterApp Labs LLC; Richmond (VA); Hybrid; USD 83,000 - 152,000; Part time

Benefits offered by this job

401(k) matching

Dental insurance

Health insurance

Vision insurance

Job summary

MasterApp Labs LLC in Richmond, VA seeks an Endpoint Security Engineer for a contract role. Responsibilities include packaging, deploying, and validating software across enterprise endpoints, using Intune, MECM/SCCM, and automation to improve security and efficiency.

Must manage patch cycles, monitor vulnerabilities, and collaborate with security teams and IT staff while maintaining documentation and hardening baselines. Hybrid on-site schedule available.

Qualifications

• Experience with Windows 11 and monthly/annual updates.
• Experience with Microsoft Office 365 apps and monthly updates.
• Experience using an Endpoint Management System.
• Experience using a Workstation Imaging Solution.
• Experience using a Service Management Ticketing System.
• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication skills.
• Ability to work independently and in a team.
• Ability to work effectively with end users, technical staff, and senior staff.

Responsibilities

• Engineer, modify, package, and deploy COTS software across enterprise endpoint environments.
• Develop and maintain deployment packages using Microsoft Intune, MECM/SCCM or similar tools.
• Perform compatibility testing and configuration adjustments for reliable software installation across devices.
• Automate software deployment workflows for efficiency and scalability.
• Collaborate with application owners and security teams on update requirements, dependencies, risks.
• Support enterprise patch management: testing, scheduling, deploying, validating OS/3rd-party updates.
• Monitor vulnerability reports from security tools and help remediating endpoint risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems.
• Maintain documentation for packaging standards, deployment procedures, and change management.
• Implement endpoint hardening policies and baseline configurations.
• Partner with infrastructure, security, and service desk for reliability and user satisfaction.
• Continuously evaluate new technologies to optimize endpoint management.

Skills

Windows 11

Microsoft 365

Endpoint Management System

Workstation Imaging

Service Management Ticketing

Analytical thinking

Communication skills

Independent work

Team collaboration

PowerShell

Intune

Autopilot

Graph API

PatchMyPC

ServiceNow

Tools

Microsoft Intune

MECM/SCCM

Job description

Benefits:

• 401(k) matching
• Dental insurance
• Health insurance
• Vision insurance

Job Title: Endpoint Security Engineer

Location: Richmond, VA, (Hybrid)- Days on site: 3 days per week - Tuesday, Wednesday, & Thursday

Position Type: Contract

Interview Mode: Web Cam

REPLACING: SCC - Vulnerability Mgmt Analyst (813431)

Responsibilities Include:

• Engineer, modify, package, and deploy commercial off‑the‑shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third‑party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Required/Desired Skills

Skill | Required /Desired | Amount | Actual Years of Experience
Experience and proficiency with Windows 11 operating systems and monthly/annual updates | Required | 4 |
Experience and proficiency with Microsoft Office 365 applications and monthly updates | Required | 4 |
Experience and proficiency using an Endpoint Management System | Required | 4 |
Experience and proficiency using a Workstation Imaging Solution | Required | 4 |
Experience and proficiency using a Service Management Ticketing System | Required | 4 |
Proven analytical and problem-solving abilities | Required | 4 |
Excellent verbal and written communication skills | Required | 4 |
Ability to work independently with minimal direction and as a team | Required | 4 |
Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service | Required | 4 |
Experience with Microsoft InTune and Autopilot | Desired | 4 |
Experience with Microsoft GraphAPI | Desired | 4 |
Experience with PatchMyPC | Desired | 4 |
Experience with ServiceNow | Desired | 4 |
Experience with PowerShell | Desired | 4 |

Flexible work from home options available.