IT Security Analyst 3 – Endpoint Engineer

Asterism IT Solutions; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Asterism IT Solutions is seeking an IT Security Analyst 3 – Endpoint Engineer for a hybrid role in Richmond, VA. You will engineer, package, and deploy software across enterprise endpoints and maintain deployment tooling and documentation.

Responsibilities include patch management, vulnerability monitoring, validating updates, and collaborating with security and IT teams to improve endpoint reliability and security posture.

Qualifications

• 4+ years of experience with Windows 11 operating systems and monthly/annual updates.
• 4+ years of experience with Office 365 applications and monthly updates.
• 4+ years of experience using an Endpoint Management System.
• 4+ years of experience using a Workstation Imaging Solution.
• 4+ years of experience using a Service Management Ticketing System.
• 4+ years of proven analytical and problem-solving abilities.
• 4+ years of excellent verbal and written communication skills.
• 4+ years of ability to work independently with minimal direction and as a team.
• 4+ years of ability to work effectively with end users, technical staff, and senior staff — providing exceptional customer service.
• 4+ years of experience with Microsoft Intune and Autopilot.
• 4+ years of experience with Microsoft GraphAPI.
• 4+ years of experience with PatchMyPC.
• 4+ years of experience with ServiceNow.
• 4+ years of PowerShell experience.

Responsibilities

• Engineer, modify, package, and deploy COTS software across enterprise endpoint environments.
• Develop and maintain deployment packages using Intune, MECM/SCCM or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments for reliable installations across device profiles.
• Automate software deployment workflows to improve efficiency and scalability.
• Collaborate with application owners and security teams on update requirements, dependencies and risks.
• Support enterprise patch management processes including testing, scheduling, deploying, and validating OS and third‑party updates.
• Monitor vulnerability reports and assist in prioritizing and remediating endpoint risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems with root-cause analysis.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management.
• Implement and enforce endpoint hardening policies, compliance settings, and baselines.
• Partner with infrastructure, security, and service desk teams to ensure endpoint reliability and security.
• Continuously evaluate new technologies and automation opportunities to optimize endpoint management.

Skills

Windows 11

Office 365

Endpoint Management System

Workstation Imaging

Service Management Ticketing

Analytical and problem-solving

Verbal and written communication

Independent work

End-user support

PowerShell

Tools

Microsoft Intune

Autopilot

Microsoft GraphAPI

PatchMyPC

ServiceNow

Job description

Job Title: IT Security Analyst 3 – Endpoint Engineer
Visa: Any Visa
Location: Hybrid — Richmond, VA
Days on site: 3 days per week – Tuesday, Wednesday, & Thursday

Responsibilities Include

• Engineer, modify, package, and deploy commercial off‑the‑shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third‑party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root‑cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Skill Set

• | Skill | Required / Desired | Amount | of Experience |
• | Experience and proficiency with Windows 11 operating systems and monthly/annual updates | Required | 4 | Years |
• | Experience and proficiency with Microsoft Office 365 applications and monthly updates | Required | 4 | Years |
• | Experience and proficiency using an Endpoint Management System | Required | 4 | Years |
• | Experience and proficiency using a Workstation Imaging Solution | Required | 4 | Years |
• | Experience and proficiency using a Service Management Ticketing System | Required | 4 | Years |
• | Proven analytical and problem-solving abilities | Required | 4 | Years |
• | Excellent verbal and written communication skills | Required | 4 | Years |
• | Ability to work independently with minimal direction and as a team | Required | 4 | Years |
• | Ability to work effective with end users, technical staff, and senior staff — providing exception customer service | Required | 4 | Years |
• | Experience with Microsoft InTune and Autopilot | Desired | 4 | Years |
• | Experience with Microsoft GraphAPI | Desired | 4 | Years |
• | Experience with PatchMyPC | Desired | 4 | Years |
• | Experience with ServiceNow | Desired | 4 | Years |
• | Experience with PowerShell | Desired | 4 | Years |