IT Security Analyst 3

Mbi Llc; Richmond (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

MBI LLC is seeking an Endpoint Engineer to support enterprise software and patch deployment activities at the State Corporation Commission. The role includes reviewing endpoint vulnerability metrics, remediation through targeted software and patch deployments, and troubleshooting failures across diverse device profiles.

The ideal candidate will have hands-on experience with Windows 11, Office 365, Intune, Autopilot, and endpoint management platforms, plus strong analytical and customer-service

Qualifications

• Experience with Windows 11 and monthly/annual updates.
• Experience with Office 365 applications and monthly updates.
• Experience using an Endpoint Management System.
• Experience using a Workstation Imaging Solution.
• Experience using a Service Management Ticketing System.
• Proven analytical and problem-solving abilities.
• Excellent verbal and written communication skills.
• Ability to work independently with minimal direction and as a team.
• Ability to work with end users, technical staff, and senior staff with strong customer service.
• Experience with Microsoft Intune and Autopilot.
• Experience with Microsoft GraphAPI.
• Experience with PatchMyPC.
• Experience with ServiceNow.
• Experience with PowerShell.

Responsibilities

• Engineer, modify, package, and deploy COTS software across enterprise endpoint environments.
• Develop and maintain deployment packages using Intune, MECM/SCCM or similar tools.
• Perform compatibility testing and configuration to ensure reliable software installation.
• Automate software deployment workflows for efficiency and consistency.
• Collaborate with owners and security teams to evaluate update requirements, dependencies, and risks.
• Support enterprise patch management processes including testing, scheduling, deploying, and validating updates.
• Monitor vulnerability reports and assist in remediation of endpoint risks.
• Troubleshoot deployment failures and configuration issues with root-cause analysis.
• Maintain documentation for packaging standards, deployment procedures, and baselines.
• Implement and enforce endpoint hardening policies and compliance settings.
• Partner with infrastructure and service desk teams to ensure endpoint reliability and security.
• Continuously evaluate new technologies and automation opportunities.

Skills

Windows 11

Office 365

Endpoint Management

Imaging Solutions

Ticketing System

Analytical thinking

Communication skills

Independent work

Customer service

Intune

Autopilot

Microsoft Graph API

PatchMyPC

ServiceNow

PowerShell

Tools

SCCM/MECM

Job description

- The State Corporation Commission (SCC) is seeking an Endpoint Engineer to support enterprise software and patch deployment activities.

- This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments.

- The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed root?cause analysis and corrective actions.

- Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

Responsibilities Include:

- Engineer, modify, package, and deploy commercial off?the?shelf (COTS) software across enterprise endpoint environments.

- Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.

- Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.

- Automate software deployment workflows to improve efficiency, consistency, and scalability.

- Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.

- Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third?party updates.

- Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.

- Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.

- Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.

- Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.

- Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.

- Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Fill the skill matrix below:

Skill

Amount

Candidate's No. of years of experience

Experience and proficiency with Windows 11 operating systems and monthly/annual updates

Required

4

Experience and proficiency with Microsoft Office 365 applications and monthly updates

Required

4

Experience and proficiency using an Endpoint Management System

Required

4

Experience and proficiency using a Workstation Imaging Solution

Required

4

Experience and proficiency using a Service Management Ticketing System

Required

4

Proven analytical and problem-solving abilities

Required

4

Excellent verbal and written communication skills

Required

4

Ability to work independently with minimal direction and as a team

Required

4

Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service

Required

4

Experience with Microsoft InTune and Autopilot

4

Experience with Microsoft GraphAPI

4

Experience with PatchMyPC

4

Experience with ServiceNow

4

Experience with PowerShell

4