Hybrid Windows Endpoint Engineer - Remediation & Automation

Apex Systems; Pittsburgh (Allegheny County); Hybrid; USD 90,000 - 125,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

401K with company match

HSA

Job summary

Apex Systems seeks a Windows Client Engineer to manage and modernize the Windows endpoint environment through Microsoft Intune and SCCM, focusing on reducing vulnerability risk in production environments.

The role is a 1-year contract with a hybrid schedule in Pittsburgh; 2+ years of relevant experience or 4+ years without a degree are considered. Proficiency with Intune, SCCM, and PowerShell is required.

Qualifications

• Bachelor’s degree preferred with 2+ years of relevant experience.
• Associate degree with 2+ years of relevant experience.
• Candidates without a degree will be considered with 4+ years of relevant experience.
• Hands‑on experience with Microsoft Intune, SCCM/Configuration Manager, and PowerShell.

Responsibilities

• Review outstanding vulnerabilities identified through Tenable, including Tenable.io, Nessus, and Tenable Security Center, and own endpoint remediation from initial finding through closure.
• Build, test, and deploy remediation solutions using Intune and SCCM, including application updates, patches, registry/configuration changes, and scripted fixes.
• Develop and maintain PowerShell scripts for automation, detection, and remediation.
• Build detection and remediation logic for Intune proactive remediations and SCCM configuration items.
• Package and deploy third-party application updates using tools such as Intune Win32 apps, SCCM application deployments, and Patch My PC.
• Manage Windows patching through Windows Update for Business, WSUS, and SCCM software update groups.
• Partner with the security/vulnerability management team to triage findings, validate remediation, and identify potential false positives.
• Track remediation progress and report on patch compliance, coverage, outstanding vulnerabilities, and SLAs.
• Maintain Windows configuration baselines and security hardening standards, including CIS and DISA STIG alignment.
• Support Intune/SCCM co-management, device onboarding, compliance policies, and Conditional Access.
• Document remediation processes and establish repeatable, well-tested deployment procedures that minimize impact to production users.

Skills

Windows client/server OS

Vulnerability remediation

Intune

SCCM/Configuration Manager

PowerShell

Education

Bachelor’s degree preferred

Associate degree

4+ years experience without a degree

Job description

Apex Systems seeks a Windows Client Engineer to manage and modernize the Windows endpoint environment through Microsoft Intune and SCCM, focusing on reducing vulnerability risk in production environments.

The role is a 1-year contract with a hybrid schedule in Pittsburgh; 2+ years of relevant experience or 4+ years without a degree are considered. Proficiency with Intune, SCCM, and PowerShell is required.