IT Security Analyst 3 - Endpoint Engineer

Job Title: IT Security Analyst 3 - Endpoint Engineer

Visa: Any Visa

Location: Hybrid – Richmond, VA

Days on site: 3 days per week - Tuesday, Wednesday, & Thursday

Responsibilities Include:

• Engineer, modify, package, and deploy commercial off‑the‑shelf (COTS) software across enterprise endpoint environments.

• Develop and maintain deployment packages using tools such as Microsoft Intune, Endpoint Configuration Manager (MECM/SCCM) or similar endpoint management platforms.

• Perform compatibility testing and configuration adjustments to ensure reliable software installation and operation across diverse device profiles.

• Automate software deployment workflows to improve efficiency, consistency, and scalability.

• Collaborate with application owners and security teams to evaluate software update requirements, dependencies, and risks.

• Support enterprise patch management processes, including testing, scheduling, deploying, and validating OS and third‑party updates.

• Monitor vulnerability reports from tools such as Rapid7, Qualys, Tenable, Defender for Endpoint, etc., and assist in prioritizing and remediating endpoint-related risks.

• Troubleshoot deployment failures, patching issues, and endpoint configuration problems, providing root-cause analysis and corrective actions.

• Maintain documentation for packaging standards, deployment procedures, endpoint baselines, and change management activities.

• Implement and enforce endpoint hardening policies, compliance settings, and configuration baselines.

• Partner with infrastructure, security, and service desk teams to ensure high endpoint reliability, security posture, and user satisfaction.

• Continuously evaluate new technologies, updates, and automation opportunities to optimize endpoint management operations.

SkillRequired / DesiredAmountof Experience

Experience and proficiency with Windows 11 operating systems and monthly/annual updates

Required

4

Years

Experience and proficiency with Microsoft Office 365 applications and monthly updates

Required

4

Years

Experience and proficiency using an Endpoint Management System

Required

4

Years

Experience and proficiency using a Workstation Imaging Solution

Required

4

Years

Experience and proficiency using a Service Management Ticketing System

Required

4

Years

Proven analytical and problem-solving abilities

Required

4

Years

Excellent verbal and written communication skills

Required

4

Years

Ability to work independently with minimal direction and as a team

Required

4

Years

Ability to work effectively with end users, technical staff, and senior staff – providing exception customer service

Required

4

Years

Experience with Microsoft InTune and Autopilot

Desired

4

Years

Experience with Microsoft GraphAPI

Desired

4

Years

Experience with PatchMyPC

Desired

4

Years

Experience with ServiceNow

Desired

4

Years

Experience with PowerShell

Desired

4

Years