IT Security Analyst 3 Endpoint Engineer (Software/Patch)

Kainos; Richmond (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

Kainos is seeking an experienced IT Security Analyst 3 – Endpoint Engineer in Richmond, VA with hybrid work arrangement. The role focuses on enterprise software packaging, deployment, and patch management for Windows endpoints, leveraging Intune and MECM/SCCM, and addressing vulnerabilities using leading security tools.

Applicants should have hands-on experience with endpoint security tooling, scripting for automation, and a strong ability to collaborate across security, infrastructure, and

Qualifications

• Experience deploying and patching enterprise endpoints.
• Hands-on with Intune and MECM/SCCM management.
• Strong scripting for deployment automation.
• Vulnerability remediation and endpoint security hygiene.
• Documentation and change-management practices.

Responsibilities

• Package, configure, test, and deploy software across endpoints.
• Develop and maintain deployment packages using Intune or MECM/SCCM.
• Manage OS and third-party patching, testing and deployment.
• Analyze vulnerability reports and remediate using security tools.
• Troubleshoot deployment and patching issues; perform root-cause analysis.
• Automate deployment and patch workflows with scripting.
• Implement endpoint hardening and security baselines.
• Collaborate with security, infrastructure, app, and service desk teams.
• Maintain technical documentation and follow change processes.

Skills

PowerShell scripting

Deployment automation

Vulnerability remediation

Endpoint hardening

Change management

Technical documentation

Tools

Microsoft Intune

MECM/SCCM (Microsoft Endpoint Configuration Manager)

Rapid7

Qualys

Tenable

Microsoft Defender for Endpoint

Job description

Job Description: IT Security Analyst 3 – Endpoint Engineer (Software/Patch)
Location: Richmond, VA – Hybrid (Onsite Tuesday, Wednesday, and Thursday)

Job Summary

Seeking an experienced Endpoint Engineer to manage enterprise software packaging, deployment, patch management, and endpoint vulnerability remediation. The ideal candidate will have hands-on experience with Microsoft Intune, MECM/SCCM, endpoint security tools, and deployment automation.

Key Responsibilities

• Package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoints.
• Develop and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or similar tools.
• Manage OS and third-party software patching, including testing, scheduling, deployment, and validation.
• Analyze vulnerability reports and remediate endpoint vulnerabilities using tools such as Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.
• Troubleshoot deployment failures, patching issues, and configuration problems; perform root-cause analysis.
• Automate software deployment and patch management workflows using scripting and automation tools.
• Implement endpoint hardening, security compliance policies, and configuration baselines.
• Collaborate with security, infrastructure, application, and service desk teams.
• Maintain technical documentation and follow change management procedures.

Required Skills

• Microsoft Intune
• MECM/SCCM (Microsoft Endpoint Configuration Manager)
• Enterprise software packaging and deployment
• Windows endpoint management and patch management
• Vulnerability assessment and remediation
• PowerShell scripting and deployment automation
• Endpoint security and configuration management
• Troubleshooting and root-cause analysis
• Change management and technical documentation

Preferred Skills

• Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint
• Windows endpoint hardening and security baselines
• Third-party application patching
• Enterprise vulnerability remediation and compliance management

Work Arrangement

Hybrid role requiring onsite presence three days per week: Tuesday, Wednesday, and Thursday, in Richmond, Virginia. Contractor parking is not provided.