SCC - IT Security Analyst 3 - Endpoint Engineer (Software/Patch)

Job Description

Job Description

Job Title: Endpoint Engineer
Job Duration: 12 Months
Job Location: Richmond, Virginia, 23219 (Hybrid)
Days on site: 3 days per week - Tuesday, Wednesday, & Thursday. Parking is not provided for contractors

• The client is seeking an Endpoint Engineer to support enterprise software and patch deployment activities.
• This role is responsible for reviewing endpoint vulnerability metrics and executing remediation through targeted software and patch deployments.
• The engineer will troubleshoot deployment failures, patching issues, and configuration problems, providing detailed root cause analysis and corrective actions.
• Additionally, the position contributes to maintaining a secure, compliant, and reliable endpoint environment across the organization.

• Engineer, modify, package, and deploy commercial off the shelf (COTS) software across enterprise endpoint environments.
• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.
• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.
• Automate software deployment workflows to improve efficiency, consistency, and scalability.
• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.
• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third party updates.
• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.
• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.
• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.
• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.
• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.
• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

• Experience and proficiency with Windows 11 operating systems and monthly/annual updates Required 4 Years
• Experience and proficiency with Microsoft Office 365 applications and monthly updates Required 4 Years
• Experience and proficiency using an Endpoint Management System Required 4 Years
• Experience and proficiency using a Workstation Imaging Solution Required 4 Years
• Experience and proficiency using a Service Management Ticketing System Required 4 Years
• Proven analytical and problem-solving abilities Required 4 Years
• Excellent verbal and written communication skills Required 4 Years
• Ability to work independently with minimal direction and as a team Required 4 Years
• Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service Required 4 Years
• Experience with Microsoft InTune and Autopilot Desired 4 Years
• Experience with Microsoft GraphAPI Desired 4 Years
• Experience with PatchMyPC Desired 4 Years
• Experience with ServiceNow Desired 4 Years
• Experience with PowerShell Desired 4 Years