Windows EndPoint Engineer Location: On-Site in Pittsburgh, PA Duration: 12 month contract
The A.C.Coy company has an immediate opening for a Microsoft Windows Client Engineer. Ideal candidates must have 3- 5 years of experience engineering and administering Microsoft Windows endpoints in an enterprise environment. Hands-on experience with Microsoft Intune and SCCM/Configuration Manager including application packaging and deployment is also required.
Responsibilities: Windows Client Engineer to manage and modernize the Windows endpoint estate through Microsoft Intune and SCCM (Configuration Manager), with a primary focus on driving down vulnerability risk. This is a hands-on engineering role: partner closely with the security team to review findings from Tenable, translate them into deployable fixes, and build the packages, scripts, and configuration baselines that remediate them at scale.
Review outstanding vulnerabilities identified by Tenable Nessus / Tenable Security Center and own the endpoint-side remediation workflow from finding to closure
Build, test, and deploy remediation packages and solutions using Intune and SCCM — application updates, patches, registry and configuration changes, and scripted fixes
Author and maintain remediation scripts (PowerShell), including detection and remediation logic for Intune proactive remediations and SCCM configuration items
Package and deploy third-party application updates that fall outside standard Microsoft patching (e.g., via Win32 apps in Intune, application deployments in SCCM, or a patching tool like PatchMyPC)
Manage Windows Update policy through Windows Update for Business / WSUS / SCCM software update groups, and ensure patch compliance reporting is accurate
Partner with the security/vulnerability management team to triage findings, validate that deployed fixes actually clear the vulnerability, and provide feedback on false positives
Track remediation progress and report on compliance, patch coverage, and outstanding risk against SLAs
Maintain configuration baselines and security hardening (e.g., CIS/DISA STIG alignment) across the Windows client fleet
Support co-management, device onboarding, compliance policies, and conditional access as part of the broader Intune/SCCM environment
Document remediation procedures and contribute to a repeatable, well-tested deployment process to avoid breaking production
Certifications:
Microsoft MD - 102, SC - 200, or CompTIA Security+ - Preferred
Responsibilities:
Experience engineering and administering Windows endpoints in an enterprise environment - 3-5 years
Hands-on experience with both Microsoft Intune and SCCM/Configuration Manager, including application packaging and deployment
Strong PowerShell scripting skills for automation, detection, and remediation
Experience with Windows patch management (Windows Update for Business, WSUS, or SCCM software updates)
Familiarity with vulnerability management concepts and tooling — Tenable experience strongly preferred; comparable tools (Qualys, Rapid7) also relevant
Understanding of CVEs, CVSS scoring, and how vulnerability findings map to real remediation actions
Solid grasp of Windows OS internals, Active Directory, Group Policy, and Entra ID (Azure AD)
Ability to test changes carefully and roll out fixes without disrupting end users
Experience with application packaging tools (PSADT, PatchMyPC) and MSI/MSIX - Preferred
Exposure to Microsoft Defender for Endpoint and its vulnerability management (TVM) integration - Preferred
Knowledge of security hardening frameworks (CIS Benchmarks, DISA STIGs) - Preferred
Numbers & Facts
Location
Canonsburg, PA
Skills
Benchmarkingunmatched
Computer Securityunmatched
Configuration Managementunmatched
Defense Information Systems Agency (DISA)unmatched
Machine Toolunmatched
Microsoft Active Directoryunmatched
Microsoft Product Familyunmatched
Microsoft Windows Azureunmatched
Microsoft Windows Operating Systemunmatched
Microsoft Windows System Administrationunmatched
Microsoft Windows System Internals/Programmingunmatched
Nessusunmatched
Onboardingunmatched
Product/Service Launchunmatched
Progress Reportsunmatched
Quality Assurance Methodologyunmatched
Riskunmatched
Scripting (Scripting Languages)unmatched
Service Level Agreement (SLA)unmatched
Software Administrationunmatched
Software Patchesunmatched
System Center Configuration Manager (SCCM)unmatched
Testingunmatched
Vehicle Fleetsunmatched
Win32 API (Application Programming Interface)unmatched
Windows PowerShellunmatched
Windows Server Update Services (WSUS)unmatched
Writing Skillsunmatched
🎯
Be found by employers
5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.
Level up your application
Professional resume templates
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.