IT Security Analyst – Endpoint Engineer

We are seeking an experienced IT Security Analyst 3 Endpoint Engineer to support enterprise software deployment, endpoint patch management, vulnerability remediation, and endpoint security operations.

The ideal candidate will have strong hands-on experience with endpoint management tools, software packaging, Windows updates, and troubleshooting deployment issues across enterprise environments.

Key Responsibilities

• Package, configure, test, and deploy commercial off-the-shelf (COTS) software across enterprise endpoints.

• Develop and maintain software deployment packages using Microsoft Intune, MECM/SCCM, or similar endpoint management tools.

• Perform compatibility testing and troubleshoot software installation and configuration issues.

• Support enterprise patch management, including testing, scheduling, deploying, and validating operating system and third-party updates.

• Review endpoint vulnerability reports and assist with risk prioritization and remediation.

• Troubleshoot deployment failures and patching issues; perform root-cause analysis and implement corrective actions.

• Maintain endpoint security baselines, configuration standards, deployment procedures, and change management documentation.

• Collaborate with security, infrastructure, application, and service desk teams to maintain a secure and reliable endpoint environment.

• Identify opportunities to automate software deployment and patch management workflows.

Required Qualifications

• Minimum 4 years of experience with Windows 11 operating systems and monthly/annual updates.

• Minimum 4 years of experience with Microsoft Office 365 applications and updates.

• Minimum 4 years of experience using an endpoint management system.

• Minimum 4 years of experience using a workstation imaging solution.

• Minimum 4 years of experience with a service management ticketing system.

• Strong analytical, troubleshooting, and problem-solving skills.

• Excellent verbal and written communication skills.

• Ability to work independently and collaboratively while providing excellent customer service to technical teams, end users, and senior staff.

Preferred Qualifications

• Microsoft Intune and Windows Autopilot.

• Microsoft Graph API.

• PatchMyPC.

• ServiceNow.

• PowerShell scripting and automation.

• Experience with enterprise software packaging, patch deployment, and endpoint vulnerability remediation.

Work Arrangement & Interview

• Hybrid position requiring onsite work in Richmond, VA, three days per week: Tuesday, Wednesday, and Thursday.

• Webcam interview only.

Interested candidates: Please share your updated resume, current location, work authorization, relevant endpoint engineering experience.