Endpoint Engineer

Endpoint Engineer Software Deployment, Patch Management & Vulnerability Remediation

Job Category: Cybersecurity / Endpoint Engineering / IT Infrastructure
Industry: Government / Public Sector IT
Work Arrangement: Hybrid Onsite Tuesday, Wednesday, and Thursday
Work Schedule: Three onsite days per week
Job Reference: 814050

We are seeking an experienced Endpoint Engineer with hands-on expertise in enterprise software deployment, patch management, and endpoint vulnerability remediation. This role focuses on maintaining secure, compliant, and reliable endpoint environments by deploying software, managing operating system and third-party patches, troubleshooting deployment failures, and addressing endpoint security risks.

The ideal candidate will have practical experience with Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), software packaging, vulnerability assessment tools, and endpoint security configuration. Candidates should be comfortable working with security, infrastructure, application, and service desk teams to resolve technical issues and improve endpoint management operations.

• Package, configure, test, and deploy commercial off-the-shelf (COTS) applications across enterprise endpoint environments.

• Create and maintain application deployment packages using Microsoft Intune, MECM/SCCM, or comparable endpoint management platforms.

• Perform application compatibility testing, installation validation, and configuration adjustments across different endpoint configurations.

• Manage endpoint patching activities, including patch testing, deployment scheduling, implementation, and post-deployment validation.

• Review endpoint vulnerability findings and coordinate remediation through software updates, security patches, and configuration changes.

• Analyze vulnerability reports generated by Rapid7, Qualys, Tenable, Microsoft Defender for Endpoint, and similar security tools.

• Troubleshoot application installation failures, unsuccessful patch deployments, configuration conflicts, and endpoint compliance issues.

• Conduct root-cause analysis and implement corrective actions to prevent recurring deployment and patching problems.

• Develop automation for software packaging, deployment, patching, and routine endpoint management tasks.

• Implement endpoint hardening standards, security configuration policies, and compliance baselines.

This position requires onsite work on Tuesday, Wednesday, and Thursday, with the remaining work arrangement subject to the engagement's requirements. Contractors must arrange their own parking.

Candidates should have hands-on endpoint engineering experience rather than vulnerability scanning experience alone. The primary focus is software packaging, enterprise deployment, patch execution, and endpoint remediation.

Analytical troubleshooting and structured problem-solving.

Clear technical documentation and communication.

Collaboration across cybersecurity and IT infrastructure teams.

Attention to detail and a strong security-focused mindset.

Ability to identify recurring technical issues and implement lasting solutions.

Rapid7, Qualys, Tenable, or Microsoft Defender for Endpoint.

PowerShell scripting or comparable automation techniques for endpoint administration.

Endpoint hardening and security baseline implementation.

Application compatibility testing and deployment troubleshooting.

IT change management, technical documentation, and patch compliance reporting.

Hands-on experience with enterprise endpoint management and software deployment.

Experience packaging, testing, deploying, and troubleshooting Windows applications.

Practical knowledge of Microsoft Intune and/or Microsoft Endpoint Configuration Manager (MECM/SCCM).

Experience supporting operating system patching and third-party application updates.

Understanding of endpoint vulnerability remediation, security compliance, and configuration management.

Ability to investigate deployment failures and perform root-cause analysis.

Experience reviewing vulnerability assessment results and coordinating remediation activities.

• Collaborate with cybersecurity, infrastructure, application, and service desk teams to resolve endpoint-related issues.

• Maintain technical documentation for software packages, deployment procedures, endpoint configurations, and change management activities.

• Identify opportunities to improve deployment reliability, patch compliance, vulnerability remediation, and endpoint management efficiency.