Job Summary
We are seeking an experienced Endpoint Engineer with strong hands-on expertise in enterprise software packaging, application deployment, endpoint management, and vulnerability remediation. The ideal candidate will be responsible for packaging, testing, deploying, and maintaining commercial off-the-shelf (COTS) applications across enterprise endpoints using Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM/SCCM).
This role will focus on enterprise patch management, OS and third-party application updates, endpoint security hardening, and remediation of vulnerabilities identified through enterprise security tools. The successful candidate will collaborate with security, infrastructure, service desk, and application teams to ensure secure, reliable, and compliant endpoint environments.
Key Responsibilities
Software Packaging & Application Deployment
- Create, modify, test, and deploy application packages for commercial off-the-shelf (COTS) and enterprise applications.
- Utilize Microsoft Intune, Microsoft Endpoint Configuration Manager (MECM/SCCM), and related endpoint management tools to manage software deployments across enterprise endpoints.
- Configure application installation, uninstallation, detection methods, dependencies, installation parameters, and deployment requirements.
- Troubleshoot installation failures and ensure consistent, reliable application deployments across supported endpoint environments.
Patch Management & Vulnerability Remediation
- Plan, test, schedule, deploy, and validate operating system and third-party application patches.
- Analyze vulnerability findings from tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint.
- Translate vulnerability scan results into actionable patching and remediation activities based on risk, severity, and business priorities.
- Monitor patch deployment status, validate remediation results, and address failed or incomplete updates.
- Coordinate remediation efforts with security operations, infrastructure teams, and application owners.
Application Compatibility Testing & Automation
- Perform application compatibility testing across supported Windows endpoint configurations.
- Identify and resolve application conflicts, installation dependencies, configuration issues, and deployment failures.
- Develop and maintain deployment scripts and workflow automations using PowerShell or equivalent scripting technologies.
- Optimize packaging and deployment processes to improve consistency, scalability, and operational efficiency.
Endpoint Troubleshooting & Root-Cause Analysis
- Diagnose complex application deployment failures, patching errors, endpoint agent issues, and configuration problems.
- Conduct root-cause analysis and implement corrective and preventive actions.
- Investigate endpoint management client health, policy application failures, installation logs, and deployment status.
- Document technical findings, remediation steps, and recurring issues to support continuous improvement.
Endpoint Security & Compliance
- Implement and maintain endpoint security configurations, compliance policies, and configuration baselines.
- Support endpoint hardening initiatives and remediation of security and compliance gaps.
- Ensure endpoint configurations and software deployments align with organizational security policies and established standards.
- Partner with security teams to validate remediation effectiveness and improve endpoint security posture.
Documentation & Cross-Functional Collaboration
- Collaborate with security operations, infrastructure, service desk, and application teams to coordinate software deployments and patching activities.
- Maintain technical documentation for application packaging standards, deployment procedures, patching workflows, troubleshooting, and change management.
- Participate in change management processes, deployment planning, testing, implementation, and post-deployment validation.
- Communicate deployment status, technical risks, remediation progress, and potential service impacts to relevant stakeholders.
Required Qualifications
- Professional experience in endpoint engineering, systems administration, application packaging, software deployment, or enterprise desktop engineering.
- Hands-on experience with Microsoft Intune, MECM/SCCM, or equivalent enterprise endpoint management platforms.
- Experience packaging, testing, deploying, and troubleshooting enterprise and commercial off-the-shelf (COTS) applications.
- Practical experience with Windows operating system and third-party application patch management.
- Experience interpreting vulnerability assessment reports and coordinating patch deployment and remediation activities.
- Strong troubleshooting and root-cause analysis skills related to application installation, endpoint management agents, patching, and configuration issues.
- Knowledge of endpoint security hardening, compliance policies, configuration baselines, and enterprise change management processes.
- Experience writing or modifying PowerShell scripts or other automation scripts for packaging, deployment, and troubleshooting.
- Strong analytical, documentation, communication, and cross-functional collaboration skills.
Preferred Qualifications
- Experience with Microsoft Intune, MECM/SCCM co-management, application deployment collections, deployment rings, and compliance policies.
- Familiarity with vulnerability management tools such as Rapid7, Qualys, Tenable, and Microsoft Defender for Endpoint.
- Experience with application packaging technologies and formats such as MSI, MSIX, and Win32 applications.
- Knowledge of PowerShell App Deployment Toolkit (PSADT) or similar application deployment frameworks.
- Experience with Windows endpoint configuration, application detection rules, installation switches, and deployment logs.
- Familiarity with ITIL practices, enterprise change management, and security remediation workflows.
- Experience supporting large-scale enterprise endpoint environments.
