Windows Endpoint Engineer - Hybrid (Pittsburgh)

A.C.Coy Company; Pittsburgh (Allegheny County); Hybrid; USD 110,000 - 140,000; Full time

Job summary

The A.C.Coy Company is seeking a Microsoft Windows Client Engineer to manage and modernize the Windows endpoint estate in a hybrid Pittsburgh environment. The role requires 3–5 years of experience with Windows endpoints in an enterprise setting, plus hands-on work with Intune and SCCM for packaging and deployment.

You will partner with the security team to triage findings from Tenable, build fixes, and develop repeatable deployment processes.

Qualifications

• Bachelor's degree is required.
• Experience with enterprise Windows endpoint engineering and administration.
• Strong scripting and automation skills with PowerShell.
• Hands-on experience with Intune and SCCM including packaging and deployment.

Responsibilities

• Manage and modernize Windows endpoint estate using Intune and SCCM.
• Lead remediation of vulnerabilities identified by Tenable and ensure remediation is deployed at scale.
• Develop and test remediation scripts and configurations for proactive remediations.
• Package and deploy patches and third‑party updates via Intune/SCCM or PatchMyPC.
• Maintain Windows Update policy and ensure patch compliance reporting accuracy.
• Collaborate with security teams to validate fixes and monitor vulnerability trends.
• Document remediation procedures to enable repeatable deployment across devices.

Skills

PowerShell scripting

Vulnerability management

Patch management

Active Directory

Entra ID / Azure AD

Security hardening

Windows endpoints

Automation

Education

Bachelor's degree

Microsoft MD-102

SC-200

CompTIA Security+

Tools

Microsoft Intune

SCCM/Configuration Manager

Job description

The A.C.Coy Company is seeking a Microsoft Windows Client Engineer to manage and modernize the Windows endpoint estate in a hybrid Pittsburgh environment. The role requires 3–5 years of experience with Windows endpoints in an enterprise setting, plus hands-on work with Intune and SCCM for packaging and deployment.

You will partner with the security team to triage findings from Tenable, build fixes, and develop repeatable deployment processes.