SCC – IT Security Analyst 3 – Endpoint Engineer (Software/Patch) (814050)/Hybrid

Key Business Solutions, Inc.; Richmond (VA); Hybrid; USD 110,000 - 140,000; Full time

Job summary

State Corporation Commission in Richmond, VA seeks an IT Endpoint Engineer to manage software deployments, patching, and endpoint security. You will deploy COTS software, automate workflows, and coordinate with security, IT ops, and service desk teams to maintain a reliable, compliant endpoint environment.

You will review vulnerability metrics, perform root-cause analysis, and implement hardening baselines while supporting enterprise tools like Intune, MECM/SCCM, and autopilot.

Qualifications

• Windows 11 OS and monthly/annual updates.
• Microsoft 365 apps with monthly updates.
• Experience with an Endpoint Management System.
• Workstation imaging solution experience.
• Service management ticketing system experience.
• Strong analytical and problem-solving abilities.
• Excellent verbal and written communication skills.
• Ability to work independently and in a team.
• Ability to work with end users and technical staff.
• Experience with Microsoft Intune and Autopilot.
• Experience with GraphAPI (desirable).
• Experience with PatchMyPC (desirable).
• Experience with ServiceNow (desirable).
• PowerShell (desirable).

Responsibilities

• Engineer, modify, package, and deploy COTS software across enterprise endpoints.
• Develop and maintain deployment packages using Intune, MECM/SCCM or similar.
• Perform compatibility testing and adjust configurations for diverse devices.
• Automate software deployment workflows for efficiency and scale.
• Collaborate with owners and security teams on update requirements and risks.
• Support patch management including testing, scheduling, deploying, and validating updates.
• Monitor vulnerability reports and assist prioritization of endpoint risks.
• Troubleshoot deployment failures and root-cause issues with corrective actions.
• Maintain documentation for packaging standards, baselines, and change mgmt.
• Implement endpoint hardening policies and compliance baselines.
• Partner with infra, security, and service desk to ensure reliability and security.
• Evaluate new tech and automation opportunities to optimize operations.

Skills

Windows 11

Microsoft 365 apps

Endpoint management

Workstation imaging

Service management ticketing

Analytical thinking

Communication skills

Independence & teamwork

End-user support

InTune & Autopilot

GraphAPI (desirable)

PatchMyPC (desirable)

ServiceNow (desirable)

PowerShell (desirable)

Tools

MECM/SCCM

Intune

Autopilot

GraphAPI

PatchMyPC

ServiceNow

PowerShell

Job description

SCC – IT Security Analyst 3 – Endpoint Engineer (Software/Patch) (814050)/Hybrid

Richmond, VA

Duration: Long term

ABOUT THE ROLE

The State Corporation Commission (SCC) is seeking an Endpoint Engineer to support enterprise software and patch deployment activities. This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments. The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed root‑cause analysis and corrective actions. Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

Responsibilities Include:

• Engineer, modify, package, and deploy commercial off‑the‑shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third‑party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint‑related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root‑cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

Skill

Required / Desired

• Experience and proficiency with Windows 11 operating systems and monthly/annual updates

  Required

  4

  Years

• Experience and proficiency with Microsoft Office 365 applications and monthly updates

  Required

  4

  Years

• Experience and proficiency using an Endpoint Management System

  Required

  4

  Years

• Experience and proficiency using a Workstation Imaging Solution

  Required

  4

  Years

• Experience and proficiency using a Service Management Ticketing System

  Required

  4

  Years

• Proven analytical and problem‑solving abilities

  Required

  4

  Years

• Excellent verbal and written communication skills

  Required

  4

  Years

• Ability to work independently with minimal direction and as a team

  Required

  4

  Years

• Ability to work effectively with end users, technical staff, and senior staff — providing exception customer service

  Required

  4

  Years

• Experience with Microsoft InTune and Autopilot

  Required

  4

  Years

• Experience with Microsoft GraphAPI

  Desired

  4

  Years

• Experience with PatchMyPC

  Desired

  4

  Years

• Experience with ServiceNow

  Desired

  4

  Years

• Experience with PowerShell

  Desired

  4

  Years