Defender For Cloud Engineer

Design, package, test, and deploy enterprise applications using PowerShell App Deployment Toolkit (PSADT), AdminStudio, InstallShield, MSI, MSIX, and other packaging technologies to deliver fully automated, silent installations across the organization. Create, maintain, and troubleshoot Windows 10 and Windows 11 operating system images and Task Sequences, supporting hardware refresh programs, operating system upgrades, and enterprise endpoint provisioning initiatives. Manage software deployments for more than 21,000 endpoint devices, leveraging phased deployment methodologies including Testing, Pre-Pilot, Pilot, and Production waves to minimize business disruption and deployment risk. Administer and support Microsoft Endpoint Configuration Manager (MECM/SCCM) infrastructure, including site systems, Distribution Points, Cloud Management Gateway (CMG), collections, boundaries, client settings, software updates, and enterprise-wide endpoint management services. Administer Microsoft Intune and co-management environments, including the creation of Win32 applications, compliance policies, configuration profiles, security baselines, mobile device management (MDM), mobile application management (MAM), and Windows Autopilot deployments. Provide Tier 3 operational support and incident resolution, managing escalated ServiceNow requests, participating in change management activities, documenting solutions, and collaborating with infrastructure, security, networking, and application teams to resolve complex technical issues. Troubleshoot complex endpoint management issues, including SCCM client health, Software Center functionality, content distribution failures, application deployment errors, operating system deployment issues, Intune enrollment problems, and endpoint configuration discrepancies. Develop and maintain PowerShell automation scripts to streamline software packaging, operating system deployment, endpoint configuration, reporting, and routine administrative tasks, improving operational efficiency and service reliability. Support endpoint security and privilege management solutions, including Microsoft LAPS, BitLocker, BeyondTrust Endpoint Privilege Management (EPM), User Account Control (UAC), and endpoint compliance initiatives to maintain corporate security standards. Evaluate, maintain, and continuously improve endpoint management technologies and processes, ensuring platform stability, successful upgrades, application compatibility, business continuity, and alignment with enterprise standards, project timelines, and operational objectives.

Required Skills Microsoft Endpoint Configuration Manager (MECM / SCCM), Application Packaging (MSI, MSIX, EXE), PowerShell Scripting, PowerShell App Deployment Toolkit (PSADT), Software Distribution & Deployment, Microsoft Intune, Windows 10/11 Administration, Operating System Deployment (OSD), Windows Feature Updates, Windows Autopilot, SCCM Task Sequences, SCCM Client Health & Remediation, Hardware Refresh & Device Provisioning, Distribution Point (DP) Management, SCCM Boundaries & Boundary Groups, ServiceNow, Microsoft Entra ID (Azure Active Directory), Active Directory (AD)

Desired Skills: Group Policy (GPO), Microsoft LAPS, Microsoft BitLocker, Cloud Management Gateway (CMG), Windows Server Administration, Microsoft Defender for Endpoint, System Center Endpoint Protection (SCEP), Flexera AdminStudio, InstallShield, Wise Package Studio, Application Compatibility Testing, Patch Management, Windows Update for Business (WUfB), Co-Management (SCCM & Intune), User Account Control (UAC), BeyondTrust Endpoint Privilege Management (EPM), BeyondTrust Remote Support, VMware VDI / Horizon VDI, Endpoint Support, Tanium, Recast Right Click Tools, Endpoint Security & Compliance, Mobile Device Management (MDM), Mobile Application Management (MAM), DNS, DHCP, ITIL Processes

For applications and inquiries,