IT Security Analyst 3 – Endpoint Engineer (Software/Patch) – Contract Position

BranCore Technologies, LLC; Richmond (VA); On-site; USD 55,000 - 96,000; Full time

Job summary

BranCore Technologies, LLC is seeking an Endpoint Engineer in Richmond, VA to support enterprise software deployments and patch management. The role focuses on reviewing vulnerability metrics and executing remediation through targeted deployments across a managed endpoint environment.

Responsibilities include packaging software, testing compatibility, automating workflows, and partnering with security teams to ensure a secure, compliant endpoint landscape.

Qualifications

• 4+ years of experience with Windows 11 and monthly/annual updates.
• 4+ years with Microsoft Office 365 applications and monthly updates.
• 4+ years using an Endpoint Management System.
• 4+ years using a Workstation Imaging Solution.
• 4+ years using a Service Management Ticketing System.
• 4+ years of analytical and problem-solving abilities.
• 4+ years of excellent verbal and written communication skills.
• 4+ years ability to work independently and in a team.
• 4+ years experience delivering exceptional customer service.

Responsibilities

• Engineer, modify, package, and deploy COTS software across enterprise endpoints.
• Develop and maintain deployment packages using Intune, MECM/SCCM, or similar tools.
• Test compatibility and adjust configurations for diverse devices.
• Automate deployment workflows for efficiency and scalability.
• Collaborate with owners and security teams on update requirements and risks.
• Support patch management processes including testing and validation.
• Monitor vulnerability reports and assist in remediation.
• Troubleshoot deployment and configuration issues with root-cause analysis.
• Maintain documentation for packaging standards and change management.
• Enforce endpoint hardening policies and baseline configurations.
• Partner with infrastructure, security, and service desk teams for reliability.
• Evaluate new technologies and automation opportunities.

Skills

Windows 11

Microsoft 365 apps

Endpoint management

Workstation imaging

Service management tickets

Analytical problem-solving

Communication skills

Independent and team work

Customer service

Tools

Microsoft Intune

Autopilot

GraphAPI

PatchMyPC

ServiceNow

PowerShell

Job description

Contract Length: 6 months with the possibility of extending based on performance.
Richmond, VA candidates are required.

Days on site: 3 days per week – Tuesday, Wednesday, & Thursday. Parking is not provided for contractors

The client’s is seeking an Endpoint Engineer to support enterprise software and patch deployment activities. This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments. The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed root‑cause analysis and corrective actions. Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

Responsibilities Include:

• Engineer, modify, package, and deploy commercial off‑the‑shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third‑party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint‑related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root‑cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Required/Desired Skills

• Experience and proficiency with Windows 11 operating systems and monthly/annual updates. Required, 4 Years
• Experience and proficiency with Microsoft Office 365 applications and monthly updates. Required, 4 Years
• Experience and proficiency using an Endpoint Management System. Required, 4 Years
• Experience and proficiency using a Workstation Imaging Solution. Required, 4 Years
• Experience and proficiency using a Service Management Ticketing System. Required, 4 Years
• Proven analytical and problem‑solving abilities. Required, 4 Years
• Excellent verbal and written communication skills. Required, 4 Years
• Ability to work independently with minimal direction and as a team. Required, 4 Years
• Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service. Required, 4 Years
• Experience with Microsoft InTune and Autopilot. Desired, 4 Years
• Experience with Microsoft GraphAPI. Desired, 4 Years
• Experience with PatchMyPC. Desired, 4 Years
• Experience with ServiceNow. Desired, 4 Years
• Experience with PowerShell. Desired, 4 Years