Systems Engineer

Systems EngineerPosition Summary: We are seeking a hands-on Systems Engineer - Workplace Engineering contractor to support the management, security, and maintenance of the organization's Windows endpoint environment. The primary focus of this role is Microsoft Intune administration, monthly Windows patching, application packaging and publishing, deployment troubleshooting, and endpoint vulnerability remediation.The engineer will independently manage recurring operational activities, collaborate with Cybersecurity, Service Desk, application owners, and other Workplace Engineering team members, and escalate architectural or strategic decisions to senior engineering resources.The ideal candidate is a dependable, hands-on endpoint engineer who can independently own recurring Intune patching, application packaging, software deployment, compliance, and remediation activities. The candidate should combine strong technical execution with disciplined testing, documentation, troubleshooting, and follow-through. This role is not intended to serve as the endpoint architect, strategic roadmap owner, or final design authority.Key Responsibilities:Manage monthly Windows quality and security patching through Microsoft Intune, including testing, deployment rings, scheduling, monitoring, exception handling, and compliance reporting.Investigate and remediate failed, stalled, or non-compliant patch deployments.Package, test, publish, update, and retire Windows applications using Microsoft Intune and the Win32 application model.Create and troubleshoot.intunewin packages, install and uninstall commands, detection rules, requirements, dependencies, supersedence, assignments, and deployment behavior.Coordinate application testing and release activities with application owners, Cybersecurity, Service Desk, and business stakeholders.Monitor application deployment status, diagnose installation failures, and implement corrective actions.Perform routine Microsoft Intune administration, including configuration profiles, compliance policies, device groups, assignments, and endpoint health monitoring.Support Windows 11 device enrollment, provisioning, configuration, and lifecycle activities, including Windows Autopilot where applicable.Identify and remediate endpoint vulnerabilities and security findings in partnership with the Cybersecurity team.Develop and maintain PowerShell scripts for packaging, deployment, detection, remediation, reporting, and troubleshooting.Investigate escalated endpoint incidents and service requests and engage senior engineering resources when appropriate.Create and maintain technical documentation, packaging standards, test evidence, operating procedures, knowledge articles, and deployment records.Execute production changes in accordance with established change, release, security, and IT service management processes.Provide clear status reporting on patch compliance, application deployments, vulnerabilities, risks, blockers, and remediation progress.Education and Experience:Bachelor's degree in Information Technology, Computer Science, or a related discipline, or equivalent relevant professional experience.Relevant Microsoft certifications are preferred but are not required when equivalent hands-on experience is demonstrated.Required Skills & Qualifications:4-7 years of experience in Endpoint Engineering, Desktop Engineering, Systems Administration, Endpoint Management, or a related IT role.3+ years of hands-on Microsoft Intune experience in an enterprise Windows environment.Demonstrated experience managing Windows monthly patching, deployment rings, compliance monitoring, and failed-device remediation through Intune.Strong hands-on experience with Win32 application packaging and deployment through Microsoft Intune.Experience creating and troubleshooting detection rules, requirements, dependencies, supersedence, assignments, and uninstall processes.Solid Windows 11 administration and troubleshooting skills.Working knowledge of Microsoft Entra ID, device identity, groups, and assignment concepts.Basic to intermediate PowerShell scripting skills for automation, application deployment, detection, and remediation.Experience investigating endpoint vulnerabilities and coordinating remediation with Cybersecurity teams.Ability to independently manage recurring operational work, prioritize multiple deployments, and meet defined patching and release timelines.Strong troubleshooting, documentation, communication, and cross-functional collaboration skills.Experience working within formal change management, release management, and incident management processes.Preferred Skills:Experience with Windows Autopilot and modern device provisioning.Experience with Microsoft Defender for Endpoint or a similar endpoint security platform.Exposure to vulnerability management tools such as Tenable, Qualys, or Rapid7.Knowledge of Windows security baselines, endpoint hardening, and compliance policies.Experience with application packaging tools, vendor packaging standards, or packaging automation.Microsoft MD-102 certification or equivalent practical experience.Familiarity with ITIL practices and enterprise change control.