IT Security Analyst 3 Endpoint Engineer (Software/Patch)

Kainos Innovative Solutions Inc; Richmond (VA); Hybrid; USD 110,000 - 140,000; Full time

Job summary

Kainos Innovative Solutions Inc is seeking an experienced IT Security Analyst 3 — Endpoint Engineer to manage enterprise software packaging, deployment, and patch management for Windows endpoints in a hybrid Richmond, VA environment. Expect hands-on work with Intune, MECM/SCCM, and endpoint security tooling.

The role emphasizes vulnerability remediation, scripting for automation, and collaboration across security, infrastructure, and service desk teams, with standard change-management

Qualifications

• Hands-on experience with Intune and MECM/SCCM for packaging and deployment.

Responsibilities

• Package, configure, test, and deploy COTS software across endpoints.
• Develop and maintain deployment packages using Intune and MECM/SCCM.
• Manage OS and third-party patching: testing, scheduling, deployment, validation.
• Analyze vulnerability reports and remediate endpoints using Rapid7, Qualys, Tenable, or Defender.
• Troubleshoot deployment failures and perform root-cause analysis.
• Automate software deployment and patch workflows with scripting.
• Implement endpoint hardening and security baselines.
• Collaborate with security, infrastructure, application, and service desk teams.
• Maintain technical docs and follow change management procedures.

Skills

Microsoft Intune

MECM/SCCM

Endpoint packaging & deployment

Patch management

Vulnerability remediation

PowerShell scripting

Endpoint security & baselines

Root-cause analysis

Change management

Tools

Rapid7

Qualys

Tenables

Defender for Endpoint

Job description

Job Description: IT Security Analyst 3 — Endpoint Engineer (Software/Patch)

Location: Richmond, VA — Hybrid (Onsite Tuesday, Wednesday, and Thursday)

Job Summary

Seeking an experienced Endpoint Engineer to manage enterprise software packaging, deployment, patch management, and endpoint vulnerability remediation. The ideal candidate will have hands‑on experience with Microsoft Intune, MECM/SCCM, endpoint security tools, and deployment automation.

Key Responsibilities

• Package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoints.
• Develop and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or similar tools.
• Manage OS and third‑party software patching, including testing, scheduling, deployment, and validation.
• Analyze vulnerability reports and remediate endpoint vulnerabilities using tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.
• Troubleshoot deployment failures, patching issues, and configuration problems; perform root‑cause analysis.
• Automate software deployment and patch management workflows using scripting and automation tools.
• Implement endpoint hardening, security compliance policies, and configuration baselines.
• Collaborate with security, infrastructure, application, and service desk teams.
• Maintain technical documentation and follow change management procedures.

Required Skills

• Microsoft Intune
• MECM/SCCM (Microsoft Endpoint Configuration Manager)
• Enterprise software packaging and deployment
• Windows endpoint management and patch management
• Vulnerability assessment and remediation
• PowerShell scripting and deployment automation
• Endpoint security and configuration management
• Troubleshooting and root‑cause analysis
• Change management and technical documentation

Preferred Skills

• Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint
• Windows endpoint hardening and security baselines
• Third‑party application patching
• Enterprise vulnerability remediation and compliance management

Work Arrangement

Hybrid role requiring onsite presence three days per week: Tuesday, Wednesday, and Thursday, in Richmond, Virginia. Contractor parking is not provided.