Endpoint Security & Patch Engineer – IT Analyst III

NimbusAITech LLC; Richmond (VA); Hybrid; USD 85,000 - 125,000; Full time

Job summary

State Corporation Commission is seeking an IT Security Analyst 3 – Endpoint Engineer to support enterprise software and patch deployment. Hybrid work in Richmond, VA with 3 onsite days per week. The role focuses on vulnerability remediation, deployment packaging, and endpoint hardening across the organization.

You will troubleshoot issues, monitor threat intel, and coordinate with security teams to ensure a secure endpoint environment while maintaining documentation and service standards.

Qualifications

• Experience with Windows 11 and monthly/annual updates.
• Experience with Microsoft 365 apps and monthly updates.
• Experience with an Endpoint Management System.
• Experience with a Workstation Imaging Solution.
• Experience with a Service Management Ticketing System.
• Analytical and problem-solving abilities.
• Strong communication skills.
• Ability to work independently and in a team.

Responsibilities

• Engineer, modify, package, and deploy software across enterprise endpoints.
• Develop and maintain deployment packages using Intune, MECM/SCCM or similar tools.
• Perform compatibility testing and configuration adjustments for reliable installs.
• Automate software deployment workflows for efficiency and consistency.
• Collaborate with application owners and security teams on updates and risks.
• Support patch management: testing, scheduling, deploying, and validating updates.
• Monitor vulnerability reports from Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and remediate risks.
• Troubleshoot deployment failures and endpoint configuration problems; provide root-cause analysis.
• Maintain documentation for packaging standards and deployment procedures.
• Enforce endpoint hardening policies and baseline configurations.
• Work with infrastructure, security, and service desk teams to ensure reliability and security.

Skills

Windows 11

Intune

MECM/SCCM

Autopilot

ServiceNow

PowerShell

GraphAPI

PatchMyPC

Vulnerability

Endpoint hardening

Tools

Intune

SCCM

Autopatch

PowerShell

Job description

State Corporation Commission is seeking an IT Security Analyst 3 – Endpoint Engineer to support enterprise software and patch deployment. Hybrid work in Richmond, VA with 3 onsite days per week. The role focuses on vulnerability remediation, deployment packaging, and endpoint hardening across the organization.

You will troubleshoot issues, monitor threat intel, and coordinate with security teams to ensure a secure endpoint environment while maintaining documentation and service standards.