HBITS-08-15094-IT Specialist-Senior

Knowledge Builders Inc; City of Albany (NY); Vor Ort; USD 90.000 - 120.000; Vollzeit

Zusammenfassung

Knowledge Builders Inc. is seeking an IT Specialist to oversee the creation and maintenance of standardized workstation images, patch protocols, and endpoint security.

The role extends beyond programming, requiring deep expertise across platforms, architectures, and business applications. You will deploy endpoints for new and existing users, mentor junior staff, and collaborate with admins and engineers to align configurations with identity and network security standards.

Qualifikationen

• 84 months experience in Desktop Engineering.
• 84 months experience with design, build, test and debugging problems.
• 84 months experience with Mobile Device Management (MDM) solution.
• 84 months experience with Active Directory group policy standard.
• 84 months experience with Networking concepts (DHCP, VLANS, ACLs, Firewalls).
• 84 months experience with organizational skills and ability to handle multiple tasks.

Aufgaben

• Build, test, and update standardized OS images (Windows, macOS) using deployment tools.
• Maintain and inject up-to-date drivers/BIOS into deployment sequences.
• Configure and optimize provisioning workflows for remote and on-site users.
• Schedule and deploy monthly OS and third-party patches to mitigate vulnerabilities.
• Monitor endpoint security software (EDR/MDR, antivirus, firewalls) for policy compliance.
• Review security vulnerability reports and implement remediation steps.
• Manage drive encryption and enforce policies via GPOs/MDM.
• Package and deploy applications using PowerShell or VBScript.

Kenntnisse

Independent work

Mentorship

Troubleshooting

Communication

Ausbildung

Certifications relevant to MS Windows

Tools

MDM

Active Directory

Entra ID

Group Policy Objects (GPOs)

PowerShell

VBScript

PDQ

MECM/SCCM

MDT

SmartDeploy

Jobbeschreibung

Project/Program

The candidate for this position will be responsible for overseeing the creation, deployment, and maintenance of standardized workstation images, comprehensive patch management protocols, endpoint security software, and other critical endpoint applications. This role is critical to ensuring the successful deployment and management of endpoints to both new and existing users across the environment. Operating beyond the scope of a traditional programmer, this IT professional possesses deep expertise in supporting and utilizing diverse development platforms, technical architectures, and business applications.

Job Description

The candidate for this position will be responsible for overseeing the creation, deployment, and maintenance of standardized workstation images, comprehensive patch management protocols, endpoint security software, and other critical endpoint applications. This role is critical to ensuring the successful deployment and management of endpoints to both new and existing users across the environment. Operating beyond the scope of a traditional programmer, this IT professional possesses deep expertise in supporting and utilizing diverse development platforms, technical architectures, and business applications.

Day-to-day Tasks

Daily tasks include but are not limited to:

• Build, test, and update standardized operating system images (e.g., Windows, macOS) using deployment tools such as PDQ, MECM/SCCM, MDT, or SmartDeploy.


• Maintain and inject up-to-date hardware drivers and BIOS/firmware packages into deployment task sequences.


• Configure and optimize modern provisioning workflows to streamline out-of-box experiences for remote and on-site users.


• Evaluate new computer models and hardware to ensure they align with existing corporate images and software configurations.


• Schedule, test, and deploy monthly operating system and third-party application patches (e.g., browsers, Adobe, Java) to mitigate vulnerabilities.


• Monitor and maintain endpoint security software (EDR/MDR, antivirus, firewalls, and data loss prevention tools) to ensure 100% compliance across the fleet.


• Review security vulnerability reports and execute targeted remediation scripts or configuration changes.


• Manage and audit drive encryption (BitLocker, FileVault) and enforce compliance policies via Group Policy Objects (GPOs) or Mobile Device Management (MDM) policies.


• Package, test, and silently deploy critical business and development applications using scripting languages (PowerShell, VBScript) or packaging tools.


• Maintain the company’s self-service software portal, allowing users to install pre-approved software without requiring local administrative rights.


• Monitor application versions across the environment to ensure standardization and prevent the use of unauthorized or end-of-life software.


• Serve as the final escalation point (Tier 3/4) for complex, persistent endpoint issues that Tier 1 and Tier 2 support teams cannot resolve.


• Collaborate with system administrators and network engineers to ensure endpoint configurations align with identity management (Active Directory, Entra ID) and network security protocols.


• Utilize endpoint analytics and telemetry tools to proactively identify and resolve system performance bottlenecks before they impact end-users.


• Provide technical guidance, mentorship, and training to junior desktop support technicians and helpdesk staff to build team capabilities.


• Write and maintain detailed technical documentation, including Standard Operating Procedures (SOPs), system architecture diagrams, and knowledge base articles for IT staff and end-users.


• Independently identify inefficiencies in current deployment or support workflows and design automated solutions to resolve them.

Mandatory Qualifications

IT Specialist–

Works in the field of Information Technology, experienced in the usage and support of a collection of development platforms, technical architectures or business applications and products that run on those platforms - beyond that of a Programmer.

Senior

60 - 84 months: Candidate is able to work independently, without assistance and provides guidance to others. May have an advanced education.

Requested Qualifications

• 84 months experience in the field of Desktop Engineering.


• 84 months experience with technical approaches in design, build testing and debugging problems.


• 84 months experience in mobile device management (MDM) solution.


• 84 months experience with Active Directory group policy standard.


• 84 months experience with Networking concepts (DHCP, VLANS, ACLs, Firewalls, etc.)


• 84 months experience with organizational skills and ability to handle multiple tasks and shifting priorities.


• 84 months experience in Windows 11 including 64 bit operating systems.


• 84 months of scripting language experience - Power Shell & VB Script preferred.


• 84 months experience with client-based security management tools including anti-virus, PKI, HHD encryption, and general client-based security hardening.


• 84 months experience with Window image deployment and package creation/management.


• 84 months experience with advanced troubleshooting and support for VPN, 2 Factor Authentication and network printing.


• 84 months active directory management experience.


• 84 months experience with cyber security best practices and compliance.


• 84 months experience with Intel workstations hardware and operating systems.


• 84 months experience analyzing and problem-solving hardware/software issues.


• 84 months of engineer experience; research, analysis, planning and implementation.


• Certifications relevant to MS Windows.

We provide equal employment opportunity for all applicants and employees regardless of race, color, sex, gender identity, gender expression, religion, age, national origin, citizenship, disability, medical condition, family care status, marital status, domestic partner status, sexual orientation, genetic information, military/veteran status, or any other protected basis.