Windows EndPoint Engineer

Sibitalent Corp; Pittsburgh (Allegheny County); On-site; USD 70,000 - 110,000; Full time

Job summary

Sibitalent Corp. is seeking an IT security-focused Windows administrator in the United States.

The role emphasizes engineering and administering Windows endpoints across enterprise environments, with hands-on work in Intune and SCCM for packaging and deployment. The ideal candidate brings strong PowerShell scripting for automation and remediation, plus experience in patch management using WSUS or Windows Update for Business.

Qualifications

• 3–5 years of experience engineering and administering Windows endpoints in enterprise environments.
• Hands-on with Intune and SCCM for packaging and deployment.
• Strong PowerShell scripting for automation, detection, remediation.
• Familiar with patch management using WSUS, Windows Update for Business, or SCCM updates.
• Familiarity with vulnerability management tools (Tenable preferred; others like Qualys/Rapid7).
• Understanding of CVEs, CVSS, and remediation mapping.
• Solid understanding of AD/Entra ID (Azure AD)

Skills

PowerShell scripting

Windows endpoint management

Vulnerability remediation

Tools

Microsoft Intune

SCCM/Configuration Manager

WSUS

Windows Update for Business

Tenable

Qualys

Rapid7

Entra ID / Azure AD

Job description

• Experience engineering and administering Windows endpoints in an enterprise environment - 3-5 years
• Hands-on experience with both Microsoft Intune and SCCM/Configuration Manager, including application packaging and deployment
• Strong PowerShell scripting skills for automation, detection, and remediation
• Experience with Windows patch management (Windows Update for Business, WSUS, or SCCM software updates)
• Familiarity with vulnerability management concepts and tooling — Tenable experience strongly preferred; comparable tools (Qualys, Rapid7) also relevant
• Understanding of CVEs, CVSS scoring, and how vulnerability findings map to real remediation actions
• Solid grasp of Windows OS internals, Active Directory, Group Policy, and Entra ID (Azure AD)