Windows Client Engineer – Endpoint & Vulnerability Remediation

Windows Client Engineer – Endpoint & Vulnerability Remediation Job#: 3054635

Job Description:

Overview We are looking for a Windows Client Engineer to manage and modernize the Windows endpoint environment through Microsoft Intune and SCCM/Configuration Manager, with a primary focus on reducing vulnerability risk.

This is a hands-on engineering role that will partner closely with the security team to review Tenable findings, translate vulnerabilities into deployable fixes, and build packages, scripts, and configuration baselines to remediate issues ft:
Monday-Friday, 8:00 AM-5:00 PMHybrid role - Tuesday and Friday from home Contract Role - 1 year

Education / Experience:

Bachelor’s degree preferred with 2+ years of relevant experience

Associate degree with 2+ years of relevant experience

Candidates without a degree will be considered with 4+ years of relevant experience

Top 3

Skills:

Proficiency with Microsoft Windows Client/Server operating systems

Ability to independently investigate and remediate vulnerabilities

Hands-on experience with Microsoft Intune, SCCM/Configuration Manager, and Power Shell Key  Responsibilities Review outstanding vulnerabilities identified through Tenable, including Tenable.io, Nessus, and Tenable Security Center, and own endpoint remediation from initial finding through closure

Build, test, and deploy remediation solutions using Intune and SCCM, including application updates, patches, registry/configuration changes, and scripted fixes

Develop and maintain Power Shell scripts for automation, detection, and remediation

Build detection and remediation logic for Intune proactive remediations and SCCM configuration items

Package and deploy third-party application updates using tools such as Intune Win
32 apps, SCCM application deployments, and Patch My PCManage Windows patching through Windows Update for Business, WSUS, and SCCM software update groups

Partner with the security/vulnerability management team to triage findings, validate remediation, and identify potential false positives

Track remediation progress and report on patch compliance, coverage, outstanding vulnerabilities, and SLAsMaintain Windows configuration baselines and security hardening standards, including CIS and DISA STIG alignment

Support Intune/SCCM co-management, device onboarding, compliance policies, and Conditional Access Document remediation processes and establish repeatable, well-tested deployment procedures that minimize impact to production users

Required Qualifications 2+ years of relevant Windows endpoint engineering experience when meeting the degree requirements, or 4+ years of relevant experience without a degree

Strong knowledge of Microsoft Windows Client/Server operating systems

Hands-on experience with Microsoft Intune and SCCM/Configuration Manager

Experience with application packaging and deployment

Strong Power Shell scripting skills for automation, detection, and remediation

Experience with Windows patch management using Windows Update for Business, WSUS, SCCM, or similar technologies

Familiarity with vulnerability management concepts and tools, with Tenable strongly preferred; experience with Qualys or Rapid7 is also relevant

Understanding of CVEs, CVSS scoring, and vulnerability remediation

Knowledge of Active Directory, Group Policy, and Entra /Azure ADAbility to independently investigate vulnerabilities, identify appropriate remediation, test changes, and deploy fixes with minimal disruption to end users

Nice to Have

Experience with PSADT, Patch My PC, MSI, or MSIX application packaging

Experience with Microsoft Defender for Endpoint and vulnerability management

Knowledge of CIS Benchmarks and DISA STIGsMicrosoft MD-102 or SC-200 certification

CompTIA Security+ certification

Everforth Apex is a…